diff options
Diffstat (limited to 'results/classifier/semantic-bugs/instruction/1057')
| -rw-r--r-- | results/classifier/semantic-bugs/instruction/1057 | 36 |
1 files changed, 0 insertions, 36 deletions
diff --git a/results/classifier/semantic-bugs/instruction/1057 b/results/classifier/semantic-bugs/instruction/1057 deleted file mode 100644 index 5815e3de..00000000 --- a/results/classifier/semantic-bugs/instruction/1057 +++ /dev/null @@ -1,36 +0,0 @@ -instruction: 0.938 -semantic: 0.521 -device: 0.491 -other: 0.379 -assembly: 0.282 -graphic: 0.233 -network: 0.207 -mistranslation: 0.133 -socket: 0.065 -KVM: 0.060 -vnc: 0.056 -boot: 0.050 - -AArch64: ISV is set to 1 in ESR_EL2 when taking a data abort with post-indexed instructions -Description of problem: -I think that I have a Qemu bug in my hands, but, I could still be missing something. Consider the following instruction: -`0x0000000000000000: C3 44 00 B8 str w3, [x6], #4` - -notice the last #4, I think this is what we would call a post-indexed instruction (falls into the category of instructions with writeback). As I understand it, those instructions should not have ISV=1 in ESR_EL2 when faulting. - -Here is the relevant part of the manual: - -``` -For other faults reported in ESR_EL2, ISV is 0 except for the following stage 2 aborts: -• AArch64 loads and stores of a single general-purpose register (including the register specified with 0b11111, including those with Acquire/Release semantics, but excluding Load Exclusive or Store Exclusive and excluding those with writeback). -``` - -However, I can see that Qemu sets ISV to 1 here. The ARM hardware that I tested gave me a value of ISV=0 for similar instructions. - -Another example of instruction: `0x00000000000002f8: 01 1C 40 38 ldrb w1, [x0, #1]!` -Steps to reproduce: -1. Run some hypervisor in EL2 -2. Create a guest running at EL1 that executes one of the mentioned instructions (and make the instruction fault by writing to some unmapped page in SLP) -3. Observe the value of ESR_EL2 on data abort - -Unfortunately, I cannot provide an image to reproduce this (the software is not open-source). But, I would be happy to help test a patch. |