diff options
| author | Andrew Oates | 2018-08-16 03:19:03 +0200 |
|---|---|---|
| committer | Paolo Bonzini | 2018-08-23 18:46:25 +0200 |
| commit | db7196db5d5d932f388643baae6835f8dcda6921 (patch) | |
| tree | 7c7454ae3b1f769fd3d1e04a0f8f4af8657bd2ca /hw/intc/apic.c | |
| parent | target-i386: Fix lcall/ljmp to call gate in IA-32e mode (diff) | |
| download | qemu-db7196db5d5d932f388643baae6835f8dcda6921.tar.gz qemu-db7196db5d5d932f388643baae6835f8dcda6921.tar.xz qemu-db7196db5d5d932f388643baae6835f8dcda6921.zip | |
target-i386: fix segment limit check in ljmp
The current implementation has three bugs,
* segment limits are not enforced in protected mode if the L bit is set
in the target segment descriptor
* segment limits are not enforced in compatibility mode (ljmp to 32-bit
code segment in long mode)
* #GP(new_cs) is generated rather than #GP(0)
Now the segment limits are enforced if we're not in long mode OR the
target code segment doesn't have the L bit set.
Signed-off-by: Andrew Oates <aoates@google.com>
Message-Id: <20180816011903.39816-1-andrew@andrewoates.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'hw/intc/apic.c')
0 files changed, 0 insertions, 0 deletions