diff options
| author | Ilya Leoshkevich <iii@linux.ibm.com> | 2023-08-07 18:34:31 +0200 |
|---|---|---|
| committer | Thomas Huth <thuth@redhat.com> | 2023-08-23 12:06:44 +0200 |
| commit | 23e87d419f347b6b5f4da3bf70d222acc24cdb64 (patch) | |
| tree | 5f4c9f6c10a1e0e17278bb44bdc0ce0d5b2318d4 /target/s390x | |
| parent | 93af6e0a61f45fe0704e27f04e759924afa59e6e (diff) | |
| download | qemu-23e87d419f347b6b5f4da3bf70d222acc24cdb64.zip qemu-23e87d419f347b6b5f4da3bf70d222acc24cdb64.tar.gz qemu-23e87d419f347b6b5f4da3bf70d222acc24cdb64.tar.bz2 | |
target/s390x: Use a 16-bit immediate in VREP
Unlike most other instructions that contain an immediate element index,
VREP's one is 16-bit, and not 4-bit. The code uses only 8 bits, so
using, e.g., 0x101 does not lead to a specification exception.
Fix by checking all 16 bits.
Cc: qemu-stable@nongnu.org
Fixes: 28d08731b1d8 ("s390x/tcg: Implement VECTOR REPLICATE")
Signed-off-by: Ilya Leoshkevich <iii@linux.ibm.com>
Message-Id: <20230807163459.849766-1-iii@linux.ibm.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Diffstat (limited to 'target/s390x')
| -rw-r--r-- | target/s390x/tcg/translate_vx.c.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/target/s390x/tcg/translate_vx.c.inc b/target/s390x/tcg/translate_vx.c.inc index b5d07d5e..ec94d39 100644 --- a/target/s390x/tcg/translate_vx.c.inc +++ b/target/s390x/tcg/translate_vx.c.inc @@ -57,7 +57,7 @@ #define FPF_LONG 3 #define FPF_EXT 4 -static inline bool valid_vec_element(uint8_t enr, MemOp es) +static inline bool valid_vec_element(uint16_t enr, MemOp es) { return !(enr & ~(NUM_VEC_ELEMENTS(es) - 1)); } @@ -964,7 +964,7 @@ static DisasJumpType op_vpdi(DisasContext *s, DisasOps *o) static DisasJumpType op_vrep(DisasContext *s, DisasOps *o) { - const uint8_t enr = get_field(s, i2); + const uint16_t enr = get_field(s, i2); const uint8_t es = get_field(s, m4); if (es > ES_64 || !valid_vec_element(enr, es)) { |