qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Paolo Bonzini <pbonzini@redhat.com>
To: "Cédric Le Goater" <clg@kaod.org>
Cc: qemu-devel@nongnu.org
Subject: Re: [Qemu-devel] [PATCH 3/3] m25p80: change cur_addr to 32 bit integer
Date: Tue, 28 Jun 2016 07:41:01 -0400 (EDT)	[thread overview]
Message-ID: <1655778647.2615556.1467114061506.JavaMail.zimbra@redhat.com> (raw)
In-Reply-To: <a3315078-a653-ef5f-a6f5-9a934829044a@kaod.org>

> On 06/28/2016 10:39 AM, Paolo Bonzini wrote:
> > The maximum amount of storage that can be addressed by the m25p80 command
> > set is 4 GiB.  However, cur_addr is currently a 64-bit integer.  To avoid
> > further problems related to sign extension of signed 32-bit integer
> > expressions, change cur_addr to a 32 bit integer.  Preserve migration
> > format by adding a dummy 4-byte field in place of the (big-endian)
> > high four bytes in the formerly 64-bit cur_addr field.
> 
> I do not think that migration ever worked before. did it ?

Who knows. :)  But it is pretty easy to not break it further...

Paolo

> > Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
> 
> Reviewed-by: Cédric Le Goater <clg@kaod.org>
> 
> > ---
> >  hw/block/m25p80.c | 15 ++++++++-------
> >  1 file changed, 8 insertions(+), 7 deletions(-)
> > 
> > diff --git a/hw/block/m25p80.c b/hw/block/m25p80.c
> > index 76a9bcf..7668b22 100644
> > --- a/hw/block/m25p80.c
> > +++ b/hw/block/m25p80.c
> > @@ -389,7 +389,7 @@ typedef struct Flash {
> >      uint32_t pos;
> >      uint8_t needed_bytes;
> >      uint8_t cmd_in_progress;
> > -    uint64_t cur_addr;
> > +    uint32_t cur_addr;
> >      uint32_t nonvolatile_cfg;
> >      /* Configuration register for Macronix */
> >      uint32_t volatile_cfg;
> > @@ -535,9 +535,9 @@ static inline void flash_sync_dirty(Flash *s, int64_t
> > newpage)
> >  }
> >  
> >  static inline
> > -void flash_write8(Flash *s, uint64_t addr, uint8_t data)
> > +void flash_write8(Flash *s, uint32_t addr, uint8_t data)
> >  {
> > -    int64_t page = addr / s->pi->page_size;
> > +    uint32_t page = addr / s->pi->page_size;
> >      uint8_t prev = s->storage[s->cur_addr];
> 
> This routine needs a cleanup. It takes an 'addr' parameter (it is called
> with s->cur_addr) and uses s->cur_addr at the same time.
> 
> C.
> 
> >      if (!s->write_enable) {
> > @@ -545,7 +545,7 @@ void flash_write8(Flash *s, uint64_t addr, uint8_t
> > data)
> >      }
> >  
> >      if ((prev ^ data) & data) {
> > -        DB_PRINT_L(1, "programming zero to one! addr=%" PRIx64 "  %" PRIx8
> > +        DB_PRINT_L(1, "programming zero to one! addr=%" PRIx32 "  %" PRIx8
> >                     " -> %" PRIx8 "\n", addr, prev, data);
> >      }
> >  
> > @@ -1094,7 +1094,7 @@ static uint32_t m25p80_transfer8(SSISlave *ss,
> > uint32_t tx)
> >      switch (s->state) {
> >  
> >      case STATE_PAGE_PROGRAM:
> > -        DB_PRINT_L(1, "page program cur_addr=%#" PRIx64 " data=%" PRIx8
> > "\n",
> > +        DB_PRINT_L(1, "page program cur_addr=%#" PRIx32 " data=%" PRIx8
> > "\n",
> >                     s->cur_addr, (uint8_t)tx);
> >          flash_write8(s, s->cur_addr, (uint8_t)tx);
> >          s->cur_addr = (s->cur_addr + 1) & (s->size - 1);
> > @@ -1102,7 +1102,7 @@ static uint32_t m25p80_transfer8(SSISlave *ss,
> > uint32_t tx)
> >  
> >      case STATE_READ:
> >          r = s->storage[s->cur_addr];
> > -        DB_PRINT_L(1, "READ 0x%" PRIx64 "=%" PRIx8 "\n", s->cur_addr,
> > +        DB_PRINT_L(1, "READ 0x%" PRIx32 "=%" PRIx8 "\n", s->cur_addr,
> >                     (uint8_t)r);
> >          s->cur_addr = (s->cur_addr + 1) & (s->size - 1);
> >          break;
> > @@ -1199,7 +1199,8 @@ static const VMStateDescription vmstate_m25p80 = {
> >          VMSTATE_UINT32(pos, Flash),
> >          VMSTATE_UINT8(needed_bytes, Flash),
> >          VMSTATE_UINT8(cmd_in_progress, Flash),
> > -        VMSTATE_UINT64(cur_addr, Flash),
> > +        VMSTATE_UNUSED(4),
> > +        VMSTATE_UINT32(cur_addr, Flash),
> >          VMSTATE_BOOL(write_enable, Flash),
> >          VMSTATE_BOOL_V(reset_enable, Flash, 2),
> >          VMSTATE_UINT8_V(ear, Flash, 2),
> > 
> 
> 

      reply	other threads:[~2016-06-28 11:41 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-06-28  8:39 [Qemu-devel] [PATCH 0/3] m25p80: various fixes Paolo Bonzini
2016-06-28  8:39 ` [Qemu-devel] [PATCH 1/3] m25p80: do not put iovec on the stack Paolo Bonzini
2016-06-28  8:53   ` Cédric Le Goater
2016-06-28 10:02     ` Cédric Le Goater
2016-06-28 14:33   ` Eric Blake
2016-06-28  8:39 ` [Qemu-devel] [PATCH 2/3] m25p80: avoid out of bounds accesses Paolo Bonzini
2016-06-28  9:05   ` Cédric Le Goater
2016-06-28 11:42     ` Paolo Bonzini
2016-06-28 12:00       ` [Qemu-devel] " Krzeminski, Marcin (Nokia - PL/Wroclaw)
2016-06-28  8:39 ` [Qemu-devel] [PATCH 3/3] m25p80: change cur_addr to 32 bit integer Paolo Bonzini
2016-06-28  9:18   ` Cédric Le Goater
2016-06-28 11:41     ` Paolo Bonzini [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1655778647.2615556.1467114061506.JavaMail.zimbra@redhat.com \
    --to=pbonzini@redhat.com \
    --cc=clg@kaod.org \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).