diff options
| author | Paolo Bonzini <pbonzini@redhat.com> | 2023-06-19 15:29:12 +0200 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2023-06-26 10:23:56 +0200 |
| commit | 53b9b4cc9fb956279c6494bfa7d7ea61f07bb214 (patch) | |
| tree | 3153dbe635e03cf9fc006708dd0512ddc7933d7b | |
| parent | 75a02adf81911c14ec51b11a8ecd6c8aabcbd049 (diff) | |
| download | qemu-53b9b4cc9fb956279c6494bfa7d7ea61f07bb214.zip qemu-53b9b4cc9fb956279c6494bfa7d7ea61f07bb214.tar.gz qemu-53b9b4cc9fb956279c6494bfa7d7ea61f07bb214.tar.bz2 | |
target/i386: sysret and sysexit are privileged
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
| -rw-r--r-- | target/i386/tcg/translate.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/target/i386/tcg/translate.c b/target/i386/tcg/translate.c index a20b5af..6680039 100644 --- a/target/i386/tcg/translate.c +++ b/target/i386/tcg/translate.c @@ -5685,7 +5685,7 @@ static bool disas_insn(DisasContext *s, CPUState *cpu) if (LMA(s) && env->cpuid_vendor1 != CPUID_VENDOR_INTEL_1) { goto illegal_op; } - if (!PE(s)) { + if (!PE(s) || CPL(s) != 0) { gen_exception_gpf(s); } else { gen_helper_sysexit(cpu_env, tcg_constant_i32(dflag - 1)); @@ -5711,7 +5711,7 @@ static bool disas_insn(DisasContext *s, CPUState *cpu) if (!LMA(s) && env->cpuid_vendor1 == CPUID_VENDOR_INTEL_1) { goto illegal_op; } - if (!PE(s)) { + if (!PE(s) || CPL(s) != 0) { gen_exception_gpf(s); } else { gen_helper_sysret(cpu_env, tcg_constant_i32(dflag - 1)); |