target/arm: take HSTR traps of cp15 accesses to EL2, not EL1
The HSTR_EL2 register allows the hypervisor to trap AArch32 EL1 and EL0 accesses to cp15 registers. We incorrectly implemented this so they trap to EL1 when we detect the need for a HSTR trap at code generation time. (The check in access_check_cp_reg() which we do at runtime to catch traps from EL0 is correctly routing them to EL2.) Use the correct target EL when generating the code to take the trap. Cc: qemu-stable@nongnu.org Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2226 Fixes: 049edada5e93df ("target/arm: Make HSTR_EL2 traps take priority over UNDEF-at-EL1") Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Message-id: 20240325133116.2075362-1-peter.maydell@linaro.org
This commit is contained in:
parent
6af9d12c88
commit
fbe5ac5671
@ -4585,7 +4585,7 @@ static void do_coproc_insn(DisasContext *s, int cpnum, int is64,
|
||||
tcg_gen_andi_i32(t, t, 1u << maskbit);
|
||||
tcg_gen_brcondi_i32(TCG_COND_EQ, t, 0, over.label);
|
||||
|
||||
gen_exception_insn(s, 0, EXCP_UDEF, syndrome);
|
||||
gen_exception_insn_el(s, 0, EXCP_UDEF, syndrome, 2);
|
||||
/*
|
||||
* gen_exception_insn() will set is_jmp to DISAS_NORETURN,
|
||||
* but since we're conditionally branching over it, we want
|
||||
|
Loading…
x
Reference in New Issue
Block a user