1 files changed, 54 insertions, 0 deletions
diff --git a/results/classifier/118/ppc/1128 b/results/classifier/118/ppc/1128
new file mode 100644
index 00000000..24f50f50
--- /dev/null
+++ b/results/classifier/118/ppc/1128
@@ -0,0 +1,54 @@
+ppc: 0.896
+graphic: 0.887
+debug: 0.762
+device: 0.733
+TCG: 0.726
+performance: 0.677
+semantic: 0.632
+i386: 0.560
+x86: 0.554
+architecture: 0.524
+assembly: 0.512
+kernel: 0.510
+vnc: 0.499
+PID: 0.483
+risc-v: 0.469
+files: 0.448
+network: 0.436
+socket: 0.432
+KVM: 0.423
+peripherals: 0.397
+permissions: 0.396
+register: 0.388
+VMM: 0.385
+hypervisor: 0.349
+boot: 0.346
+arm: 0.263
+user-level: 0.252
+mistranslation: 0.215
+virtual: 0.202
+
+PPC: `spr_write_xer` doesn't set flag bits in `cpu_xer`
+Description of problem:
+`spr_write_xer()` does not set the `ca`, `ov`, `so`, `ca32`, `ov32` etc. flag bits in the `cpu_xer` variable.
+
+In fact it copies all bits from the source `GPR` and _excludes_ each flag bit.
+
+This is not a problem for execution since `spr_read_xer()` gets the flag bits from `cpu_ca/ov/so...` and not from `cpu_xer`.
+
+Nonetheless it is problem for tools which trace the execution in QEMU (e.g. https://github.com/BinaryAnalysisPlatform/qemu). 
+
+A fix would be to remove the `~` in https://gitlab.com/qemu-project/qemu/-/blob/master/target/ppc/translate.c#L481
+Steps to reproduce:
+Haven't found out yet how to debug QEMU so the TCGv values can be investigated. But in general one need to:
+
+- Execute a binary which executes something like:
+```
+r4 = 0xffffffffffffffff
+mtxer r4
+```
+and check the `cpu_xer` value after the `xer` write.
+
+Checking the debug logs (`in_asm,cpu`) doesn't work, since the `xer` value in the logs is not taken directly from `cpu_xer`.
+Additional information:
+Code ref: https://gitlab.com/qemu-project/qemu/-/blob/master/target/ppc/translate.c#L480-L483