]> git.ipfire.org Git - thirdparty/qemu.git/commit
target/riscv: fixes a bug against `ssamoswap` behavior in M-mode
authorDeepak Gupta <debug@rivosinc.com>
Thu, 6 Mar 2025 06:46:36 +0000 (22:46 -0800)
committerAlistair Francis <alistair.francis@wdc.com>
Wed, 19 Mar 2025 06:34:32 +0000 (16:34 +1000)
commitd2c5759c8dd4c00195d4ebecc7d009e41df6baef
treed7800db6218c2f4578582a0a720118dab9778393
parent86c78b280607fcff787866a03374047c65037a90
target/riscv: fixes a bug against `ssamoswap` behavior in M-mode

Commit f06bfe3dc38c ("target/riscv: implement zicfiss instructions") adds
`ssamoswap` instruction. `ssamoswap` takes the code-point from existing
reserved encoding (and not a zimop like other shadow stack instructions).
If shadow stack is not enabled (via xenvcfg.SSE) and effective priv is
less than M then `ssamoswap` must result in an illegal instruction
exception. However if effective priv is M, then `ssamoswap` results in
store/AMO access fault. See Section "22.2.3. Shadow Stack Memory
Protection" of priv spec.

Fixes: f06bfe3dc38c ("target/riscv: implement zicfiss instructions")
Reported-by: Ved Shanbhogue <ved@rivosinc.com>
Signed-off-by: Deepak Gupta <debug@rivosinc.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Message-ID: <20250306064636.452396-2-debug@rivosinc.com>
Signed-off-by: Alistair Francis <alistair.francis@wdc.com>
target/riscv/insn_trans/trans_rvzicfiss.c.inc