diff options
| author | Leon Alrae | 2015-09-10 11:15:28 +0200 |
|---|---|---|
| committer | Leon Alrae | 2015-09-18 10:20:48 +0200 |
| commit | 3adafef2f35d9061b56a09071b2589b9e0b36f76 (patch) | |
| tree | 8e60b28acd33c2ac4ae59c6dab962bcfcdaa187b /include/exec | |
| parent | pic32: use LCG algorithm for generated random index of TLBWR instruction (diff) | |
| download | qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.tar.gz qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.tar.xz qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.zip | |
target-mips: fix corner case in TLBWR causing QEMU to hang
cpu_mips_get_random() function is used to generate a random index from
CP0.Wired to TLBSize-1 range. Current implementation avoids generating
the same as before value, hence the while loop. If the guest sets
CP0.Wired to TLBSize-1 (which actually does not sound to be very
practical) QEMU will get stuck in the loop infinitely as we always
generate the same index.
Signed-off-by: Leon Alrae <leon.alrae@imgtec.com>
Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
Diffstat (limited to 'include/exec')
0 files changed, 0 insertions, 0 deletions