summary refs log tree commit diff stats
path: root/util/qemu-error.c
diff options
context:
space:
mode:
authorLeon Alrae <leon.alrae@imgtec.com>2015-09-10 10:15:28 +0100
committerLeon Alrae <leon.alrae@imgtec.com>2015-09-18 09:20:48 +0100
commit3adafef2f35d9061b56a09071b2589b9e0b36f76 (patch)
tree8e60b28acd33c2ac4ae59c6dab962bcfcdaa187b /util/qemu-error.c
parentceb0ee147df35adc7b705da1c84a4624c9cabb21 (diff)
downloadfocaccia-qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.tar.gz
focaccia-qemu-3adafef2f35d9061b56a09071b2589b9e0b36f76.zip
target-mips: fix corner case in TLBWR causing QEMU to hang
cpu_mips_get_random() function is used to generate a random index from
CP0.Wired to TLBSize-1 range. Current implementation avoids generating
the same as before value, hence the while loop. If the guest sets
CP0.Wired to TLBSize-1 (which actually does not sound to be very
practical) QEMU will get stuck in the loop infinitely as we always
generate the same index.

Signed-off-by: Leon Alrae <leon.alrae@imgtec.com>
Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
Diffstat (limited to 'util/qemu-error.c')
0 files changed, 0 insertions, 0 deletions