target/arm: Correct value returned by pmu_counter_mask()
pmu_counter_mask() accidentally returns a value with bits [63:32] set, because the expression it returns is evaluated as a signed value that gets sign-extended to 64 bits. Force the whole expression to be evaluated with 64-bit arithmetic with ULL suffixes. The main effect of this bug was that a guest could write to the bits in the high half of registers like PMCNTENSET_EL0 that are supposed to be RES0. Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Message-Id: <20220822132358.3524971-3-peter.maydell@linaro.org> Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
This commit is contained in:
parent
76e25d41d4
commit
c117c0649c
@ -1296,7 +1296,7 @@ static inline uint32_t pmu_num_counters(CPUARMState *env)
|
||||
/* Bits allowed to be set/cleared for PMCNTEN* and PMINTEN* */
|
||||
static inline uint64_t pmu_counter_mask(CPUARMState *env)
|
||||
{
|
||||
return (1 << 31) | ((1 << pmu_num_counters(env)) - 1);
|
||||
return (1ULL << 31) | ((1ULL << pmu_num_counters(env)) - 1);
|
||||
}
|
||||
|
||||
#ifdef TARGET_AARCH64
|
||||
|
Loading…
Reference in New Issue
Block a user