b0f650f047
If low-address-protection is active, unaligned stores to non-protected
parts of lowcore lead to protection exceptions. The reason is that in
such cases tlb_fill() call in store_helper_unaligned() covers
[0, addr + size) range, which contains the protected portion of
lowcore. This range is too large.
The most straightforward fix would be to make sure we stay within the
original [addr, addr + size) range. However, if an unaligned access
affects a single page, we don't need to call tlb_fill() in
store_helper_unaligned() at all, since it would be identical to
the previous tlb_fill() call in store_helper(), and therefore a no-op.
If an unaligned access covers multiple pages, this situation does not
occur.
Therefore simply skip TLB handling in store_helper_unaligned() if we
are dealing with a single page.
Fixes:
|
||
---|---|---|
.. | ||
atomic_common.c.inc | ||
atomic_template.h | ||
cpu-exec-common.c | ||
cpu-exec.c | ||
cputlb.c | ||
hmp.c | ||
internal.h | ||
ldst_common.c.inc | ||
meson.build | ||
plugin-gen.c | ||
plugin-helpers.h | ||
tb-context.h | ||
tb-hash.h | ||
tcg-accel-ops-icount.c | ||
tcg-accel-ops-icount.h | ||
tcg-accel-ops-mttcg.c | ||
tcg-accel-ops-mttcg.h | ||
tcg-accel-ops-rr.c | ||
tcg-accel-ops-rr.h | ||
tcg-accel-ops.c | ||
tcg-accel-ops.h | ||
tcg-all.c | ||
tcg-runtime-gvec.c | ||
tcg-runtime.c | ||
tcg-runtime.h | ||
trace-events | ||
trace.h | ||
translate-all.c | ||
translator.c | ||
user-exec-stub.c | ||
user-exec.c |