proxmox-mirrors/qemu
1
0
Fork 0
mirror of https://git.proxmox.com/git/qemu synced 2025-07-22 14:13:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

PPC: Get rid of segfaults in DBDMA emulation

Browse Source 
While trying to find the right channel number for the DBDMA emulation I
stumbled across segmentation faults that were purely triggered by the guest.

The guest should never have the possiblity to segfault us, so let's check
all indirect function calls on a channel, so the code even works for channels
that have not been reserved.

Signed-off-by: Alexander Graf <agraf@suse.de>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
This commit is contained in:
Alexander Graf 2010-02-09 17:37:07 +01:00 committed by Michael S. Tsirkin
parent dffc07ca92
commit a9ceb76d55
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hw/mac_dbdma.c
View File

@ -402,8 +402,10 @@ static void start_output(DBDMA_channel *ch, int key, uint32_t addr,
ch->io.dma_end = dbdma_end; ch->io.dma_end = dbdma_end;
ch->io.is_dma_out = 1; ch->io.is_dma_out = 1;
ch->processing = 1; ch->processing = 1;
if (ch->rw) {
ch->rw(&ch->io); ch->rw(&ch->io);
} }
}
static void start_input(DBDMA_channel *ch, int key, uint32_t addr, static void start_input(DBDMA_channel *ch, int key, uint32_t addr,
uint16_t req_count, int is_last) uint16_t req_count, int is_last)
@ -425,8 +427,10 @@ static void start_input(DBDMA_channel *ch, int key, uint32_t addr,
ch->io.dma_end = dbdma_end; ch->io.dma_end = dbdma_end;
ch->io.is_dma_out = 0; ch->io.is_dma_out = 0;
ch->processing = 1; ch->processing = 1;
if (ch->rw) {
ch->rw(&ch->io); ch->rw(&ch->io);
} }
}
static void load_word(DBDMA_channel *ch, int key, uint32_t addr, static void load_word(DBDMA_channel *ch, int key, uint32_t addr,
uint16_t len) uint16_t len)
@ -688,7 +692,7 @@ dbdma_control_write(DBDMA_channel *ch)
if (status & ACTIVE) if (status & ACTIVE)
qemu_bh_schedule(dbdma_bh); qemu_bh_schedule(dbdma_bh);
if (status & FLUSH) if ((status & FLUSH) && ch->flush)
ch->flush(&ch->io); ch->flush(&ch->io);
} }