e6fdfb8433
mttcg asserts that an execution ending with EXCP_HALTED must have
cpu->halted. However between the event or instruction that sets
cpu->halted and requests exit and the assertion here, an
asynchronous event could clear cpu->halted.
This leads to crashes running AIX on ppc/pseries because it uses
H_CEDE/H_PROD hcalls, where H_CEDE sets self->halted = 1 and
H_PROD sets other cpu->halted = 0 and kicks it.
H_PROD could be turned into an interrupt to wake, but several other
places in ppc, sparc, and semihosting follow what looks like a similar
pattern setting halted = 0 directly. So remove this assertion.
Reported-by: Ivan Warren <ivan@vmfacility.fr>
Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
Message-Id: <20230829010658.8252-1-npiggin@gmail.com>
[rth: Keep the case label and adjust the comment.]
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
(cherry picked from commit
|
||
---|---|---|
.. | ||
atomic_common.c.inc | ||
atomic_template.h | ||
cpu-exec-common.c | ||
cpu-exec.c | ||
cputlb.c | ||
hmp.c | ||
internal.h | ||
ldst_common.c.inc | ||
meson.build | ||
plugin-gen.c | ||
plugin-helpers.h | ||
tb-context.h | ||
tb-hash.h | ||
tb-jmp-cache.h | ||
tb-maint.c | ||
tcg-accel-ops-icount.c | ||
tcg-accel-ops-icount.h | ||
tcg-accel-ops-mttcg.c | ||
tcg-accel-ops-mttcg.h | ||
tcg-accel-ops-rr.c | ||
tcg-accel-ops-rr.h | ||
tcg-accel-ops.c | ||
tcg-accel-ops.h | ||
tcg-all.c | ||
tcg-runtime-gvec.c | ||
tcg-runtime.c | ||
tcg-runtime.h | ||
trace-events | ||
trace.h | ||
translate-all.c | ||
translator.c | ||
user-exec-stub.c | ||
user-exec.c |