Skip to contentSkip to conversation

x86-64: Fix 64-bit lgs/lfs/lss

PATCH In review Jan Kiszka 2 participants 4 messages Jul 7, 2008

lore
Share & tools
lore

Jan Kiszka

author
#0 lore raw

PATCH 1/1 x86-64: Fix 64-bit lgs/lfs/lss

Reading the code while porting my segment limit and type checks to latest SVN made me stumble over this bug in the translator: 64-bit lgs/lfs/lss was incorrectly reading only 32-bit offsets.

---
 target-i386/translate.c |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
target-i386/translate.c +2 -2
Index: b/target-i386/translate.c
===================================================================
@@ -4864,7 +4864,7 @@ static target_ulong disas_insn(DisasCont
     case 0x1b5: /* lgs Gv */
         op = R_GS;
     do_lxx:
-        ot = dflag ? OT_LONG : OT_WORD;
+        ot = dflag + OT_WORD;
         modrm = ldub_code(s->pc++);
         reg = ((modrm >> 3) & 7) | rex_r;
         mod = (modrm >> 6) & 3;
@@ -4872,7 +4872,7 @@ static target_ulong disas_insn(DisasCont
             goto illegal_op;
         gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
         gen_op_ld_T1_A0(ot + s->mem_index);
-        gen_add_A0_im(s, 1 << (ot - OT_WORD + 1));
+        gen_add_A0_im(s, 1 << ot);
         /* load the segment first to handle exceptions properly */
         gen_op_ldu_T0_A0(OT_WORD + s->mem_index);
         gen_movl_seg_T0(s, op, pc_start - s->cs_base);
#1 lore raw

Hi,

OK, at least for Intel CPUs. From the AMD & Intel specs, the behavior seems to differ between the two. If it is really the case, a CPU specific config bit is needed. Unfortunately there may be other corner cases where AMD and Intel differ in 64 bit mode.

Fabrice.

Quoted 35 lines · Jan Kiszka

Reading the code while porting my segment limit and type checks to latest SVN made me stumble over this bug in the translator: 64-bit lgs/lfs/lss was incorrectly reading only 32-bit offsets.

---
 target-i386/translate.c |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Index: b/target-i386/translate.c
===================================================================

target-i386/translate.c +2 -2
@@ -4864,7 +4864,7 @@ static target_ulong disas_insn(DisasCont
     case 0x1b5: /* lgs Gv */
         op = R_GS;
     do_lxx:
-        ot = dflag ? OT_LONG : OT_WORD;
+        ot = dflag + OT_WORD;
         modrm = ldub_code(s->pc++);
         reg = ((modrm >> 3) & 7) | rex_r;
         mod = (modrm >> 6) & 3;
@@ -4872,7 +4872,7 @@ static target_ulong disas_insn(DisasCont
             goto illegal_op;
         gen_lea_modrm(s, modrm, &reg_addr, &offset_addr);
         gen_op_ld_T1_A0(ot + s->mem_index);
-        gen_add_A0_im(s, 1 << (ot - OT_WORD + 1));
+        gen_add_A0_im(s, 1 << ot);
         /* load the segment first to handle exceptions properly */
         gen_op_ldu_T0_A0(OT_WORD + s->mem_index);
         gen_movl_seg_T0(s, op, pc_start - s->cs_base);
author
#2 lore raw
Quoted 6 lines · Fabrice Bellard

Hi,

OK, at least for Intel CPUs. From the AMD & Intel specs, the behavior seems to differ between the two. If it is really the case, a CPU specific config bit is needed. Unfortunately there may be other corner cases where AMD and Intel differ in 64 bit mode.

Indeed, just checked: there is a difference in the specs. Will update this patch to make it CPU-specific.

Jan

author
#3 lore raw
Quoted 10 lines · Jan Kiszka
Quoted 6 lines · Fabrice Bellard

Hi,

OK, at least for Intel CPUs. From the AMD & Intel specs, the behavior seems to differ between the two. If it is really the case, a CPU specific config bit is needed. Unfortunately there may be other corner cases where AMD and Intel differ in 64 bit mode.

Indeed, just checked: there is a difference in the specs. Will update this patch to make it CPU-specific.

Hmm, there is no Intel cpu type yet that supports 64-bit...

So I guess we better keeps things as-is for now before claiming to be Intel-compatible while other broken corner cases are waiting to bite us.

Jan