Skip to content

Commit ca3912d

Browse files
committed
Fix undefined behavior converting TCGv_i32 to TCGv_i64
1 parent c915d13 commit ca3912d

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

qemu/target/arm/translate.c

+6-4
Original file line numberDiff line numberDiff line change
@@ -452,17 +452,19 @@ static void gen_sub_carry(TCGContext *tcg_ctx, TCGv_i32 dest, TCGv_i32 t0, TCGv_
452452
tcg_gen_subi_i32(tcg_ctx, dest, dest, 1);
453453
}
454454

455-
static inline void mb_tcg_opcode_cmp_hook(TCGContext *tcg_ctx, TCGv_i64 v0, TCGv_i64 v1, uint32_t size)
455+
static inline void mb_tcg_opcode_cmp_hook(TCGContext *tcg_ctx, TCGv_i32 v0, TCGv_i32 v1, uint32_t size)
456456
{
457457
uc_engine *uc = tcg_ctx->uc;
458+
TCGv_i64 targ1 = temp_tcgv_i64(tcg_ctx, tcgv_i32_temp(tcg_ctx, v0));
459+
TCGv_i64 targ2 = temp_tcgv_i64(tcg_ctx, tcgv_i32_temp(tcg_ctx, v1));
458460
if (HOOK_EXISTS_BOUNDED(uc, UC_HOOK_TCG_OPCODE, tcg_ctx->pc_start)) {
459461
struct hook *hook;
460462
HOOK_FOREACH_VAR_DECLARE;
461463
HOOK_FOREACH(uc, hook, UC_HOOK_TCG_OPCODE) {
462464
if (hook->to_delete)
463465
continue;
464466
if (hook->op == UC_TCG_OP_SUB && (hook->op_flags & UC_TCG_OP_FLAG_CMP)) {
465-
gen_uc_traceopcode(tcg_ctx, hook, v0, v1, size, uc, tcg_ctx->pc_start);
467+
gen_uc_traceopcode(tcg_ctx, hook, targ1, targ2, size, uc, tcg_ctx->pc_start);
466468
}
467469
}
468470
}
@@ -471,7 +473,7 @@ static inline void mb_tcg_opcode_cmp_hook(TCGContext *tcg_ctx, TCGv_i64 v0, TCGv
471473
/* dest = T0 + T1. Compute C, N, V and Z flags */
472474
static void gen_add_CC(TCGContext *tcg_ctx, TCGv_i32 dest, TCGv_i32 t0, TCGv_i32 t1)
473475
{
474-
mb_tcg_opcode_cmp_hook(tcg_ctx, (TCGv_i64)t0, (TCGv_i64)t1, 32);
476+
mb_tcg_opcode_cmp_hook(tcg_ctx, t0, t1, 32);
475477

476478
TCGv_i32 tmp = tcg_temp_new_i32(tcg_ctx);
477479
tcg_gen_movi_i32(tcg_ctx, tmp, 0);
@@ -515,7 +517,7 @@ static void gen_adc_CC(TCGContext *tcg_ctx, TCGv_i32 dest, TCGv_i32 t0, TCGv_i32
515517
/* dest = T0 - T1. Compute C, N, V and Z flags */
516518
static void gen_sub_CC(TCGContext *tcg_ctx, TCGv_i32 dest, TCGv_i32 t0, TCGv_i32 t1)
517519
{
518-
mb_tcg_opcode_cmp_hook(tcg_ctx, (TCGv_i64)t0, (TCGv_i64)t1, 32);
520+
mb_tcg_opcode_cmp_hook(tcg_ctx, t0, t1, 32);
519521

520522
TCGv_i32 tmp;
521523
tcg_gen_sub_i32(tcg_ctx, tcg_ctx->cpu_NF, t0, t1);

0 commit comments

Comments
 (0)