qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Peter Maydell <peter.maydell@linaro.org>
To: qemu-devel@nongnu.org
Subject: [Qemu-devel] [PULL 08/25] hw/intc/arm_gicv3: Remove incorrect usage of fieldoffset
Date: Tue, 27 Dec 2016 15:21:00 +0000	[thread overview]
Message-ID: <1482852077-19397-9-git-send-email-peter.maydell@linaro.org> (raw)
In-Reply-To: <1482852077-19397-1-git-send-email-peter.maydell@linaro.org>

In the ARMCPRegInfo definitions for the GICv3 CPU interface
registers, we were trying to use .fieldoffset to specify
the locations of data fields within the GICv3CPUState struct.
This is completely broken, because .fieldoffset is for offsets
into the CPUARMState struct. We didn't notice because we
were only using this for reads to BPR0, AP0R<n>, IGRPEN0
and CTLR_EL3, and Linux doesn't use these registers.

Replace the .fieldoffset uses with explicit read functions.

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com>
---
 hw/intc/arm_gicv3_cpuif.c | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/hw/intc/arm_gicv3_cpuif.c b/hw/intc/arm_gicv3_cpuif.c
index bca30c4..35e8eb3 100644
--- a/hw/intc/arm_gicv3_cpuif.c
+++ b/hw/intc/arm_gicv3_cpuif.c
@@ -1118,35 +1118,35 @@ static const ARMCPRegInfo gicv3_cpuif_reginfo[] = {
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 8, .opc2 = 3,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_bpr[GICV3_G0]),
+      .readfn = icc_bpr_read,
       .writefn = icc_bpr_write,
     },
     { .name = "ICC_AP0R0_EL1", .state = ARM_CP_STATE_BOTH,
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 8, .opc2 = 4,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_apr[GICV3_G0][0]),
+      .readfn = icc_ap_read,
       .writefn = icc_ap_write,
     },
     { .name = "ICC_AP0R1_EL1", .state = ARM_CP_STATE_BOTH,
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 8, .opc2 = 5,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_apr[GICV3_G0][1]),
+      .readfn = icc_ap_read,
       .writefn = icc_ap_write,
     },
     { .name = "ICC_AP0R2_EL1", .state = ARM_CP_STATE_BOTH,
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 8, .opc2 = 6,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_apr[GICV3_G0][2]),
+      .readfn = icc_ap_read,
       .writefn = icc_ap_write,
     },
     { .name = "ICC_AP0R3_EL1", .state = ARM_CP_STATE_BOTH,
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 8, .opc2 = 7,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_apr[GICV3_G0][3]),
+      .readfn = icc_ap_read,
       .writefn = icc_ap_write,
     },
     /* All the ICC_AP1R*_EL1 registers are banked */
@@ -1275,7 +1275,7 @@ static const ARMCPRegInfo gicv3_cpuif_reginfo[] = {
       .opc0 = 3, .opc1 = 0, .crn = 12, .crm = 12, .opc2 = 6,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL1_RW, .accessfn = gicv3_fiq_access,
-      .fieldoffset = offsetof(GICv3CPUState, icc_igrpen[GICV3_G0]),
+      .readfn = icc_igrpen_read,
       .writefn = icc_igrpen_write,
     },
     /* This register is banked */
@@ -1299,7 +1299,6 @@ static const ARMCPRegInfo gicv3_cpuif_reginfo[] = {
       .opc0 = 3, .opc1 = 6, .crn = 12, .crm = 12, .opc2 = 4,
       .type = ARM_CP_IO | ARM_CP_NO_RAW,
       .access = PL3_RW,
-      .fieldoffset = offsetof(GICv3CPUState, icc_ctlr_el3),
       .readfn = icc_ctlr_el3_read,
       .writefn = icc_ctlr_el3_write,
     },
-- 
2.7.4

  parent reply	other threads:[~2016-12-27 15:21 UTC|newest]

Thread overview: 27+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-12-27 15:20 [Qemu-devel] [PULL 00/25] target-arm queue Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 01/25] cadence_uart: Check baud rate generator and divider values on migration Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 02/25] cadence_uart: Check if receiver timeout counter is disabled Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 03/25] Correct value of ARM Cortex-A8 MVFR1 register Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 04/25] target-arm: Fix aarch64 vec_reg_offset Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 05/25] target-arm: Fix aarch64 disas_ldst_single_struct Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 06/25] hw/intc/arm_gicv3_common: fix aff3 in typer Peter Maydell
2016-12-27 15:20 ` [Qemu-devel] [PULL 07/25] target-arm: Log AArch64 exception returns Peter Maydell
2016-12-27 15:21 ` Peter Maydell [this message]
2016-12-27 15:21 ` [Qemu-devel] [PULL 09/25] hw/intc/arm_gicv3: Don't signal Pending+Active interrupts to CPU Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 10/25] hw/arm/virt: add 2.9 machine type Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 11/25] m25p80: add support for the mx66l1g45g Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 12/25] aspeed: QOMify the CPU object and attach it to the SoC Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 13/25] aspeed: remove cannot_destroy_with_object_finalize_yet Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 14/25] aspeed: attach the second SPI controller object to the SoC Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 15/25] aspeed: extend the board configuration with flash models Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 16/25] aspeed: add support for the romulus-bmc board Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 17/25] aspeed: add a memory region for SRAM Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 18/25] aspeed: add the definitions for the AST2400 A1 SoC Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 19/25] aspeed: change SoC revision of the palmetto-bmc machine Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 20/25] aspeed/scu: fix SCU region size Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 21/25] aspeed/smc: improve segment register support Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 22/25] aspeed/smc: set the number of flash modules for the FMC controller Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 23/25] hw/arm: remove trailing whitespace Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 24/25] hw/i2c: Add a NULL check for i2c slave init callbacks Peter Maydell
2016-12-27 15:21 ` [Qemu-devel] [PULL 25/25] target-arm: Add VBAR support to ARM1176 CPUs Peter Maydell
2016-12-27 17:25 ` [Qemu-devel] [PULL 00/25] target-arm queue Peter Maydell

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1482852077-19397-9-git-send-email-peter.maydell@linaro.org \
    --to=peter.maydell@linaro.org \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).