aboutsummaryrefslogtreecommitdiff
path: root/target/arm/m_helper.c
diff options
context:
space:
mode:
authorPeter Maydell <peter.maydell@linaro.org>2022-12-16 15:24:10 +0000
committerPeter Maydell <peter.maydell@linaro.org>2023-01-23 13:32:38 +0000
commit1e5da7e55332c76da2057e6d5298d7bf1733f104 (patch)
tree103077b50ae3bd8335664e29c1c0470468cf577e /target/arm/m_helper.c
parent4a1103afb16efa64600ef0c2b03afe60f689fdc9 (diff)
downloadqemu-1e5da7e55332c76da2057e6d5298d7bf1733f104.zip
qemu-1e5da7e55332c76da2057e6d5298d7bf1733f104.tar.gz
qemu-1e5da7e55332c76da2057e6d5298d7bf1733f104.tar.bz2
target/arm: Don't set EXC_RETURN.ES if Security Extension not present
In v7m_exception_taken(), for v8M we set the EXC_RETURN.ES bit if either the exception targets Secure or if the CPU doesn't implement the Security Extension. This is incorrect: the v8M Arm ARM specifies that the ES bit should be RES0 if the Security Extension is not implemented, and the pseudocode agrees. Remove the incorrect condition, so that we leave the ES bit 0 if the Security Extension isn't implemented. This doesn't have any guest-visible effects for our current set of emulated CPUs, because all our v8M CPUs implement the Security Extension; but it's worth fixing in case we add a v8M CPU without the extension in future. Reported-by: Igor Kotrasinski <i.kotrasinsk@samsung.com> Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
Diffstat (limited to 'target/arm/m_helper.c')
-rw-r--r--target/arm/m_helper.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c
index d87b9ec..e7e746e 100644
--- a/target/arm/m_helper.c
+++ b/target/arm/m_helper.c
@@ -879,7 +879,7 @@ static void v7m_exception_taken(ARMCPU *cpu, uint32_t lr, bool dotailchain,
}
lr &= ~R_V7M_EXCRET_ES_MASK;
- if (targets_secure || !arm_feature(env, ARM_FEATURE_M_SECURITY)) {
+ if (targets_secure) {
lr |= R_V7M_EXCRET_ES_MASK;
}
lr &= ~R_V7M_EXCRET_SPSEL_MASK;