mirror of
https://github.com/yuzu-emu/unicorn.git
synced 2025-03-23 05:25:11 +00:00
target/i386: Generate #UD when applying LOCK to a register destination
Fixes a TCG crash due to attempting the atomic operation without having set up the address first. This does not attempt to fix all of the other missing checks for LOCK. Fixes: a7cee522f35 Fixes: https://bugs.launchpad.net/qemu/+bug/1803160 Backports commit e84fcd7f662a0d8198703f6f89416d7ac2c32767 from qemu
This commit is contained in:
parent
9b5f4d32ba
commit
2af9cf7113
|
@ -1426,6 +1426,23 @@ static void gen_helper_fp_arith_STN_ST0(DisasContext *s, int op, int opreg)
|
|||
}
|
||||
}
|
||||
|
||||
static void gen_exception(DisasContext *s, int trapno, target_ulong cur_eip)
|
||||
{
|
||||
TCGContext *tcg_ctx = s->uc->tcg_ctx;
|
||||
|
||||
gen_update_cc_op(s);
|
||||
gen_jmp_im(s, cur_eip);
|
||||
gen_helper_raise_exception(tcg_ctx, tcg_ctx->cpu_env, tcg_const_i32(tcg_ctx, trapno));
|
||||
s->base.is_jmp = DISAS_NORETURN;
|
||||
}
|
||||
|
||||
/* Generate #UD for the current instruction. The assumption here is that
|
||||
the instruction is known, but it isn't allowed in the current cpu mode. */
|
||||
static void gen_illegal_opcode(DisasContext *s)
|
||||
{
|
||||
gen_exception(s, EXCP06_ILLOP, s->pc_start - s->cs_base);
|
||||
}
|
||||
|
||||
/* if d == OR_TMP0, it means memory operand (address in A0) */
|
||||
static void gen_op(DisasContext *s, int op, TCGMemOp ot, int d)
|
||||
{
|
||||
|
@ -1434,6 +1451,11 @@ static void gen_op(DisasContext *s, int op, TCGMemOp ot, int d)
|
|||
TCGv cpu_cc_src = tcg_ctx->cpu_cc_src;
|
||||
|
||||
if (d != OR_TMP0) {
|
||||
if (s->prefix & PREFIX_LOCK) {
|
||||
/* Lock prefix when destination is not memory. */
|
||||
gen_illegal_opcode(s);
|
||||
return;
|
||||
}
|
||||
gen_op_mov_v_reg(s, ot, s->T0, d);
|
||||
} else if (!(s->prefix & PREFIX_LOCK)) {
|
||||
gen_op_ld_v(s, ot, s->T0, s->A0);
|
||||
|
@ -2690,23 +2712,6 @@ static void gen_leave(DisasContext *s)
|
|||
gen_op_mov_reg_v(s, a_ot, R_ESP, s->T1);
|
||||
}
|
||||
|
||||
static void gen_exception(DisasContext *s, int trapno, target_ulong cur_eip)
|
||||
{
|
||||
TCGContext *tcg_ctx = s->uc->tcg_ctx;
|
||||
|
||||
gen_update_cc_op(s);
|
||||
gen_jmp_im(s, cur_eip);
|
||||
gen_helper_raise_exception(tcg_ctx, tcg_ctx->cpu_env, tcg_const_i32(tcg_ctx, trapno));
|
||||
s->base.is_jmp = DISAS_NORETURN;
|
||||
}
|
||||
|
||||
/* Generate #UD for the current instruction. The assumption here is that
|
||||
the instruction is known, but it isn't allowed in the current cpu mode. */
|
||||
static void gen_illegal_opcode(DisasContext *s)
|
||||
{
|
||||
gen_exception(s, EXCP06_ILLOP, s->pc_start - s->cs_base);
|
||||
}
|
||||
|
||||
/* Similarly, except that the assumption here is that we don't decode
|
||||
the instruction at all -- either a missing opcode, an unimplemented
|
||||
feature, or just a bogus instruction stream. */
|
||||
|
|
Loading…
Reference in a new issue