aboutsummaryrefslogtreecommitdiff
path: root/tcg
diff options
context:
space:
mode:
authorRichard Henderson <richard.henderson@linaro.org>2021-03-20 10:57:19 -0600
committerRichard Henderson <richard.henderson@linaro.org>2021-03-23 19:36:36 -0600
commit15c4e8fe44e34eee4a13135eeb121b3b26e4cd1b (patch)
treeb6b6e9a7b4bbb3231957d4207fba529eb09e31ab /tcg
parent266469947161aa10b1d36843580d369d5aa38589 (diff)
downloadqemu-15c4e8fe44e34eee4a13135eeb121b3b26e4cd1b.zip
qemu-15c4e8fe44e34eee4a13135eeb121b3b26e4cd1b.tar.gz
qemu-15c4e8fe44e34eee4a13135eeb121b3b26e4cd1b.tar.bz2
tcg: Do not set guard pages on the rx portion of code_gen_buffer
The rw portion of the buffer is the only one in which overruns can be generated. Allow the rx portion to be more completely covered by huge pages. Signed-off-by: Richard Henderson <richard.henderson@linaro.org> Tested-by: Roman Bolshakov <r.bolshakov@yadro.com> Reviewed-by: Roman Bolshakov <r.bolshakov@yadro.com> Message-Id: <20210320165720.1813545-2-richard.henderson@linaro.org>
Diffstat (limited to 'tcg')
-rw-r--r--tcg/tcg.c12
1 files changed, 5 insertions, 7 deletions
diff --git a/tcg/tcg.c b/tcg/tcg.c
index de91bb6..88c9e6f 100644
--- a/tcg/tcg.c
+++ b/tcg/tcg.c
@@ -828,7 +828,6 @@ void tcg_region_init(void)
size_t region_size;
size_t n_regions;
size_t i;
- uintptr_t splitwx_diff;
n_regions = tcg_n_regions();
@@ -858,8 +857,11 @@ void tcg_region_init(void)
/* account for that last guard page */
region.end -= page_size;
- /* set guard pages */
- splitwx_diff = tcg_splitwx_diff;
+ /*
+ * Set guard pages in the rw buffer, as that's the one into which
+ * buffer overruns could occur. Do not set guard pages in the rx
+ * buffer -- let that one use hugepages throughout.
+ */
for (i = 0; i < region.n; i++) {
void *start, *end;
int rc;
@@ -867,10 +869,6 @@ void tcg_region_init(void)
tcg_region_bounds(i, &start, &end);
rc = qemu_mprotect_none(end, page_size);
g_assert(!rc);
- if (splitwx_diff) {
- rc = qemu_mprotect_none(end + splitwx_diff, page_size);
- g_assert(!rc);
- }
}
tcg_region_trees_init();