diff options
Diffstat (limited to 'results/classifier/118/graphic/2601')
| -rw-r--r-- | results/classifier/118/graphic/2601 | 66 |
1 files changed, 66 insertions, 0 deletions
diff --git a/results/classifier/118/graphic/2601 b/results/classifier/118/graphic/2601 new file mode 100644 index 000000000..a50ab657d --- /dev/null +++ b/results/classifier/118/graphic/2601 @@ -0,0 +1,66 @@ +graphic: 0.988 +architecture: 0.956 +TCG: 0.945 +arm: 0.941 +debug: 0.914 +assembly: 0.789 +performance: 0.788 +vnc: 0.759 +device: 0.756 +ppc: 0.707 +files: 0.645 +peripherals: 0.594 +hypervisor: 0.555 +risc-v: 0.530 +VMM: 0.504 +network: 0.482 +mistranslation: 0.406 +kernel: 0.380 +permissions: 0.379 +semantic: 0.358 +socket: 0.340 +user-level: 0.337 +PID: 0.331 +x86: 0.244 +boot: 0.235 +virtual: 0.229 +register: 0.227 +KVM: 0.107 +i386: 0.080 + +Executing LD1SB + MTE on Arm64 fails an assert +Description of problem: +I'm getting +``` +qemu-system-aarch64: ../tcg/tcg-op-gvec.c:91: simd_desc: Assertion `data == sextract32(data, 0, (32 - ((0 + 8) + 2)))' failed. +``` +This is caused by the upper bits of `data` being set to 1, which violates the condition. +Steps to reproduce: +1. build QEMU with assertions enabled (e.g., `configure --enable-debug-tcg`). +2. have a `LD1SB f{z25.d}, p3/z, [x14, x9]` (binary a5894dd9) instruction in the executed code. +3. enable mte +4. Let QEMU execute the ld1sb instruction. +Additional information: +{width=699 height=141} + +This issue happens because for ld1sb, nregs=0 in `sve.decode`: +``` +# SVE contiguous load (scalar plus scalar) +LD_zprr 1010010 .... ..... 010 ... ..... ..... @rprr_load_dt nreg=0 +``` +As a result, in do_mem_zpa is called with n_reg=0, which becomes mte_n inside do_mem_zpa. +Since mte_n==0, and mte_active, then +```c +desc = FIELD_DP32(desc, MTEDESC, SIZEM1, (mte_n << msz) - 1); +``` +sets (0) - 1 == -1 to the field, which also sets the upper bits of `desc`. +The `desc` with upper bits set to 1 is used to call: +```c +desc = simd_desc(vsz, vsz, zt | desc); +``` +Inside `simd_desc`, the last parameter is named `data` and it fails the assertion: +```c +tcg_debug_assert(data == sextract32(data, 0, SIMD_DATA_BITS)) +``` + +# |