diff options
author | Igor V. Kovalenko <igor.v.kovalenko@gmail.com> | 2009-12-13 19:03:31 +0000 |
---|---|---|
committer | Blue Swirl <blauwirbel@gmail.com> | 2009-12-13 19:03:31 +0000 |
commit | 90228ee395b71cdd64e6bc844e3d553eb9ef643f (patch) | |
tree | c4b15718360671879c9e39bf9ebc92d728023c21 /target-mips | |
parent | cf708987d7df69a5c72db8ba587e448a1bd02587 (diff) | |
download | qemu-90228ee395b71cdd64e6bc844e3d553eb9ef643f.zip qemu-90228ee395b71cdd64e6bc844e3d553eb9ef643f.tar.gz qemu-90228ee395b71cdd64e6bc844e3d553eb9ef643f.tar.bz2 |
workaround for cmd646 bmdma register access while no dma is active
This is a workaround only, and is a partial revert
of a few changes to BMDMAState which removed pci_dev
field on the way.
- cmd646 pci_from_bm() expects bm->unit value to
correspond with bm data being passed to callback
as opaque pointer. This breaks when write to dma
control register of second channel happens when no
dma operation is in progress, so bm->unit is zero
for second channel, and pci_from_bm() returns garbage
pointer. Crash happens shortly after that while
dereferencing that pointer.
v0->v1: cleaned up dead code from pci_from_bm.
Signed-off-by: Igor V. Kovalenko <igor.v.kovalenko@gmail.com>
Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
Diffstat (limited to 'target-mips')
0 files changed, 0 insertions, 0 deletions