CVE-2016-1981: infinite loop in e1000 (bz #1299995) Fix Out-of-bounds read in usb-ehci (bz #1300234, bz #1299455) CVE-2016-2197: ahci: null pointer dereference (bz #1302952) Fix gdbstub for VSX registers for ppc64 (bz #1304377) Fix qemu-img vmdk images to work with VMware (bz #1299185)
75 lines
2.6 KiB
Diff
75 lines
2.6 KiB
Diff
From: Greg Kurz <gkurz@linux.vnet.ibm.com>
|
|
Date: Fri, 15 Jan 2016 16:00:18 +0100
|
|
Subject: [PATCH] target-ppc: rename and export maybe_bswap_register()
|
|
|
|
This helper will be used to support FP, Altivec and VSX registers when
|
|
the guest is little-endian.
|
|
|
|
Signed-off-by: Greg Kurz <gkurz@linux.vnet.ibm.com>
|
|
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
|
|
(cherry picked from commit 376dbce0e3abe456fb8c7a3cd40dc369f8b33d30)
|
|
---
|
|
target-ppc/cpu.h | 1 +
|
|
target-ppc/gdbstub.c | 10 +++++-----
|
|
2 files changed, 6 insertions(+), 5 deletions(-)
|
|
|
|
diff --git a/target-ppc/cpu.h b/target-ppc/cpu.h
|
|
index 9706000..1e2516e 100644
|
|
--- a/target-ppc/cpu.h
|
|
+++ b/target-ppc/cpu.h
|
|
@@ -2355,4 +2355,5 @@ int ppc_get_vcpu_dt_id(PowerPCCPU *cpu);
|
|
*/
|
|
PowerPCCPU *ppc_get_vcpu_by_dt_id(int cpu_dt_id);
|
|
|
|
+void ppc_maybe_bswap_register(CPUPPCState *env, uint8_t *mem_buf, int len);
|
|
#endif /* !defined (__CPU_PPC_H__) */
|
|
diff --git a/target-ppc/gdbstub.c b/target-ppc/gdbstub.c
|
|
index 14675f4..b20bb0c 100644
|
|
--- a/target-ppc/gdbstub.c
|
|
+++ b/target-ppc/gdbstub.c
|
|
@@ -88,7 +88,7 @@ static int ppc_gdb_register_len(int n)
|
|
the proper ordering for the binary, and cannot be changed.
|
|
For system mode, TARGET_WORDS_BIGENDIAN is always set, and we must check
|
|
the current mode of the chip to see if we're running in little-endian. */
|
|
-static void maybe_bswap_register(CPUPPCState *env, uint8_t *mem_buf, int len)
|
|
+void ppc_maybe_bswap_register(CPUPPCState *env, uint8_t *mem_buf, int len)
|
|
{
|
|
#ifndef CONFIG_USER_ONLY
|
|
if (!msr_le) {
|
|
@@ -158,7 +158,7 @@ int ppc_cpu_gdb_read_register(CPUState *cs, uint8_t *mem_buf, int n)
|
|
break;
|
|
}
|
|
}
|
|
- maybe_bswap_register(env, mem_buf, r);
|
|
+ ppc_maybe_bswap_register(env, mem_buf, r);
|
|
return r;
|
|
}
|
|
|
|
@@ -214,7 +214,7 @@ int ppc_cpu_gdb_read_register_apple(CPUState *cs, uint8_t *mem_buf, int n)
|
|
break;
|
|
}
|
|
}
|
|
- maybe_bswap_register(env, mem_buf, r);
|
|
+ ppc_maybe_bswap_register(env, mem_buf, r);
|
|
return r;
|
|
}
|
|
|
|
@@ -227,7 +227,7 @@ int ppc_cpu_gdb_write_register(CPUState *cs, uint8_t *mem_buf, int n)
|
|
if (!r) {
|
|
return r;
|
|
}
|
|
- maybe_bswap_register(env, mem_buf, r);
|
|
+ ppc_maybe_bswap_register(env, mem_buf, r);
|
|
if (n < 32) {
|
|
/* gprs */
|
|
env->gpr[n] = ldtul_p(mem_buf);
|
|
@@ -277,7 +277,7 @@ int ppc_cpu_gdb_write_register_apple(CPUState *cs, uint8_t *mem_buf, int n)
|
|
if (!r) {
|
|
return r;
|
|
}
|
|
- maybe_bswap_register(env, mem_buf, r);
|
|
+ ppc_maybe_bswap_register(env, mem_buf, r);
|
|
if (n < 32) {
|
|
/* gprs */
|
|
env->gpr[n] = ldq_p(mem_buf);
|