summaryrefslogtreecommitdiffstats
path: root/results/classifier/zero-shot-user-mode/output/instruction/2683
diff options
context:
space:
mode:
Diffstat (limited to 'results/classifier/zero-shot-user-mode/output/instruction/2683')
-rw-r--r--results/classifier/zero-shot-user-mode/output/instruction/268345
1 files changed, 0 insertions, 45 deletions
diff --git a/results/classifier/zero-shot-user-mode/output/instruction/2683 b/results/classifier/zero-shot-user-mode/output/instruction/2683
deleted file mode 100644
index 349beb58..00000000
--- a/results/classifier/zero-shot-user-mode/output/instruction/2683
+++ /dev/null
@@ -1,45 +0,0 @@
-instruction: 0.673
-runtime: 0.166
-syscall: 0.161
-
-
-
-TCG: probe_access() has inconsistent behavior
-Description of problem:
-In full-system mode, probe_access() will return NULL when the flag is TLB_MMIO.
-
-accel/tcg/cputlb.c: probe_access_internal()
-```
- if (unlikely(flags & ~(TLB_WATCHPOINT | TLB_NOTDIRTY | TLB_CHECK_ALIGNED))
- || (access_type != MMU_INST_FETCH && force_mmio)) {
- *phost = NULL;
- return TLB_MMIO;
- }
-```
-But in linux-user mode, it will return correct address when the flag is TLB_MMIO.
-
-accel/tcg/user-exec.c: probe_access()
-```
- return size ? g2h(env_cpu(env), addr) : NULL;
-```
-This will lead to some different behaviors, like cbo.zero in RISC-V.
-
-target/riscv/op_helper.c: helper_cbo_zero()
-```
- mem = probe_write(env, address, cbozlen, mmu_idx, ra);
-
- if (likely(mem)) {
- memset(mem, 0, cbozlen);
- } else {
- for (int i = 0; i < cbozlen; i++) {
- cpu_stb_mmuidx_ra(env, address + i, 0, mmu_idx, ra);
- }
- }
-```
-When the current instruction has memory callback by plugin:
-
-Full-system mode uses slow-path(cpu_stb_mmuidx_ra) and inject mem_cbs correctly.
-
-Linux-user mode uses fast-path(memset) and doesn't inject callbacks.
-
-To ensure consistent results, probe_access() should return NULL when the flag is TLB_MMIO in linux-user mode.