mirror of https://github.com/proxmox/mirror_qemu
s390x/tcg: MVCIN: Fault-safe handling
We can process a maximum of 256 bytes, crossing two pages. Calculate the accessed range upfront - src is accessed right-to-left. Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Signed-off-by: David Hildenbrand <david@redhat.com>master
parent
4d78c68baf
commit
65a27df927
|
@ -479,12 +479,21 @@ void HELPER(mvc)(CPUS390XState *env, uint32_t l, uint64_t dest, uint64_t src)
|
||||||
/* move inverse */
|
/* move inverse */
|
||||||
void HELPER(mvcin)(CPUS390XState *env, uint32_t l, uint64_t dest, uint64_t src)
|
void HELPER(mvcin)(CPUS390XState *env, uint32_t l, uint64_t dest, uint64_t src)
|
||||||
{
|
{
|
||||||
|
const int mmu_idx = cpu_mmu_index(env, false);
|
||||||
|
S390Access srca, desta;
|
||||||
uintptr_t ra = GETPC();
|
uintptr_t ra = GETPC();
|
||||||
int i;
|
int i;
|
||||||
|
|
||||||
for (i = 0; i <= l; i++) {
|
/* MVCIN always copies one more byte than specified - maximum is 256 */
|
||||||
uint8_t v = cpu_ldub_data_ra(env, src - i, ra);
|
l++;
|
||||||
cpu_stb_data_ra(env, dest + i, v, ra);
|
|
||||||
|
src = wrap_address(env, src - l + 1);
|
||||||
|
srca = access_prepare(env, src, l, MMU_DATA_LOAD, mmu_idx, ra);
|
||||||
|
desta = access_prepare(env, dest, l, MMU_DATA_STORE, mmu_idx, ra);
|
||||||
|
for (i = 0; i < l; i++) {
|
||||||
|
const uint8_t x = access_get_byte(env, &srca, l - i - 1, ra);
|
||||||
|
|
||||||
|
access_set_byte(env, &desta, i, x, ra);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue