diff options
| author | Zero Tang <zero.tangptr@gmail.com> | 2025-08-18 12:16:47 +0200 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2025-08-27 10:57:03 +0200 |
| commit | c12cbaa007c9da97a11e74119ea3aed9fcc3ac4c (patch) | |
| tree | 950cc4f8be357511c2f964de90078885429fecba /rust/qemu-api-macros/src/tests.rs | |
| parent | a7542a38f399c50337e10aadd60513a400c45013 (diff) | |
| download | focaccia-qemu-c12cbaa007c9da97a11e74119ea3aed9fcc3ac4c.tar.gz focaccia-qemu-c12cbaa007c9da97a11e74119ea3aed9fcc3ac4c.zip | |
i386/tcg/svm: fix incorrect canonicalization
For all 32-bit systems and 64-bit Windows systems, "long" is 4 bytes long. Due to using "long" for a linear address, svm_canonicalization would set all high bits to 1 when (assuming 48-bit linear address) the segment base is bigger than 0x7FFF. This fixes booting guests under TCG when the guest IDT and GDT bases are above 0x7FFF, thereby resulting in incorrect bases. When an interrupt arrives, it would trigger a #PF exception; the #PF would trigger again, resulting in a #DF exception; the #PF would trigger for the third time, resulting in triple-fault, and eventually causes a shutdown VM-Exit to the hypervisor right after guest boot. Cc: qemu-stable@nongnu.org Signed-off-by: Zero Tang <zero.tangptr@gmail.com>
Diffstat (limited to 'rust/qemu-api-macros/src/tests.rs')
0 files changed, 0 insertions, 0 deletions