diff options
| author | Leon Alrae <leon.alrae@imgtec.com> | 2015-09-10 10:15:28 +0100 |
|---|---|---|
| committer | Leon Alrae <leon.alrae@imgtec.com> | 2015-09-18 09:20:48 +0100 |
| commit | 3adafef2f35d9061b56a09071b2589b9e0b36f76 (patch) | |
| tree | 8e60b28acd33c2ac4ae59c6dab962bcfcdaa187b /target-mips | |
| parent | ceb0ee147df35adc7b705da1c84a4624c9cabb21 (diff) | |
| download | qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.zip qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.tar.gz qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.tar.bz2 | |
target-mips: fix corner case in TLBWR causing QEMU to hang
cpu_mips_get_random() function is used to generate a random index from
CP0.Wired to TLBSize-1 range. Current implementation avoids generating
the same as before value, hence the while loop. If the guest sets
CP0.Wired to TLBSize-1 (which actually does not sound to be very
practical) QEMU will get stuck in the loop infinitely as we always
generate the same index.
Signed-off-by: Leon Alrae <leon.alrae@imgtec.com>
Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
Diffstat (limited to 'target-mips')
0 files changed, 0 insertions, 0 deletions