diff options
| author | Richard Henderson <richard.henderson@linaro.org> | 2021-04-06 10:40:21 -0700 |
|---|---|---|
| committer | Peter Maydell <peter.maydell@linaro.org> | 2021-04-12 11:06:24 +0100 |
| commit | ff38bca7d633868ac094ef86f3b246e8f57181d4 (patch) | |
| tree | 9fdd6aacfd8368e7ed2ce9eae0244cac229639fa /target/arm | |
| parent | eb42297a59e103500bdd2c352c5b52f54b1c33cd (diff) | |
| download | qemu-ff38bca7d633868ac094ef86f3b246e8f57181d4.zip qemu-ff38bca7d633868ac094ef86f3b246e8f57181d4.tar.gz qemu-ff38bca7d633868ac094ef86f3b246e8f57181d4.tar.bz2 | |
target/arm: Check PAGE_WRITE_ORG for MTE writeability
We can remove PAGE_WRITE when (internally) marking a page
read-only because it contains translated code.
This can be triggered by tests/tcg/aarch64/bti-2, after
having serviced SIGILL trampolines on the stack.
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
Reviewed-by: Alex Bennée <alex.bennee@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'target/arm')
| -rw-r--r-- | target/arm/mte_helper.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/target/arm/mte_helper.c b/target/arm/mte_helper.c index 0bbb9ec..8be17e1 100644 --- a/target/arm/mte_helper.c +++ b/target/arm/mte_helper.c @@ -83,7 +83,7 @@ static uint8_t *allocation_tag_mem(CPUARMState *env, int ptr_mmu_idx, uint8_t *tags; uintptr_t index; - if (!(flags & (ptr_access == MMU_DATA_STORE ? PAGE_WRITE : PAGE_READ))) { + if (!(flags & (ptr_access == MMU_DATA_STORE ? PAGE_WRITE_ORG : PAGE_READ))) { /* SIGSEGV */ arm_cpu_tlb_fill(env_cpu(env), ptr, ptr_size, ptr_access, ptr_mmu_idx, false, ra); |