aboutsummaryrefslogtreecommitdiff
path: root/exec.c
diff options
context:
space:
mode:
authorPaolo Bonzini <pbonzini@redhat.com>2013-07-29 14:27:39 +0200
committerPaolo Bonzini <pbonzini@redhat.com>2013-09-05 18:11:28 +0200
commit098178f2749a63fbbb1a626dcc7d939d5cb2bde7 (patch)
tree2da6a8109ddacaf5fc060119ea310856fedf33b4 /exec.c
parentaaa6a40194e9f204cb853f64ef3c1e170bb014e8 (diff)
downloadqemu-098178f2749a63fbbb1a626dcc7d939d5cb2bde7.zip
qemu-098178f2749a63fbbb1a626dcc7d939d5cb2bde7.tar.gz
qemu-098178f2749a63fbbb1a626dcc7d939d5cb2bde7.tar.bz2
exec: fix writing to MMIO area with non-power-of-two length
The problem is introduced by commit 2332616 (exec: Support 64-bit operations in address_space_rw, 2013-07-08). Before that commit, memory_access_size would only return 1/2/4. Since alignment is already handled above, reduce l to the largest power of two that is smaller than l. Cc: qemu-stable@nongnu.org Reported-by: Oleksii Shevchuk <alxchk@gmail.com> Tested-by: Oleksii Shevchuk <alxchk@gmail.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'exec.c')
-rw-r--r--exec.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/exec.c b/exec.c
index 87b0b39..b52ec80 100644
--- a/exec.c
+++ b/exec.c
@@ -1913,6 +1913,9 @@ static int memory_access_size(MemoryRegion *mr, unsigned l, hwaddr addr)
if (l > access_size_max) {
l = access_size_max;
}
+ if (l & (l - 1)) {
+ l = 1 << (qemu_fls(l) - 1);
+ }
return l;
}