nvic: Implement "user accesses BusFault" SCS region behaviour
The ARMv7M architecture specifies that most of the addresses in the PPB region (which includes the NVIC, systick and system registers) are not accessible to unprivileged accesses, which should BusFault with a few exceptions: * the STIR is configurably user-accessible * the ITM (which we don't implement at all) is always user-accessible Implement this by switching the register access functions to the _with_attrs scheme that lets us distinguish user mode accesses. This allows us to pull the handling of the CCR.USERSETMPEND flag up to the level where we can make it generate a BusFault as it should for non-permitted accesses. Note that until the core ARM CPU code implements turning MEMTX_ERROR into a BusFault the registers will continue to act as RAZ/WI to user accesses. Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Message-id: 1501692241-23310-16-git-send-email-peter.maydell@linaro.org
This commit is contained in:
parent
d2db1de6ff
commit
eb578a2394
|
@ -733,11 +733,8 @@ static void nvic_writel(NVICState *s, uint32_t offset, uint32_t value)
|
||||||
}
|
}
|
||||||
case 0xf00: /* Software Triggered Interrupt Register */
|
case 0xf00: /* Software Triggered Interrupt Register */
|
||||||
{
|
{
|
||||||
/* user mode can only write to STIR if CCR.USERSETMPEND permits it */
|
|
||||||
int excnum = (value & 0x1ff) + NVIC_FIRST_IRQ;
|
int excnum = (value & 0x1ff) + NVIC_FIRST_IRQ;
|
||||||
if (excnum < s->num_irq &&
|
if (excnum < s->num_irq) {
|
||||||
(arm_current_el(&cpu->env) ||
|
|
||||||
(cpu->env.v7m.ccr & R_V7M_CCR_USERSETMPEND_MASK))) {
|
|
||||||
armv7m_nvic_set_pending(s, excnum);
|
armv7m_nvic_set_pending(s, excnum);
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
|
@ -748,14 +745,32 @@ static void nvic_writel(NVICState *s, uint32_t offset, uint32_t value)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
static uint64_t nvic_sysreg_read(void *opaque, hwaddr addr,
|
static bool nvic_user_access_ok(NVICState *s, hwaddr offset)
|
||||||
unsigned size)
|
{
|
||||||
|
/* Return true if unprivileged access to this register is permitted. */
|
||||||
|
switch (offset) {
|
||||||
|
case 0xf00: /* STIR: accessible only if CCR.USERSETMPEND permits */
|
||||||
|
return s->cpu->env.v7m.ccr & R_V7M_CCR_USERSETMPEND_MASK;
|
||||||
|
default:
|
||||||
|
/* All other user accesses cause a BusFault unconditionally */
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
static MemTxResult nvic_sysreg_read(void *opaque, hwaddr addr,
|
||||||
|
uint64_t *data, unsigned size,
|
||||||
|
MemTxAttrs attrs)
|
||||||
{
|
{
|
||||||
NVICState *s = (NVICState *)opaque;
|
NVICState *s = (NVICState *)opaque;
|
||||||
uint32_t offset = addr;
|
uint32_t offset = addr;
|
||||||
unsigned i, startvec, end;
|
unsigned i, startvec, end;
|
||||||
uint32_t val;
|
uint32_t val;
|
||||||
|
|
||||||
|
if (attrs.user && !nvic_user_access_ok(s, addr)) {
|
||||||
|
/* Generate BusFault for unprivileged accesses */
|
||||||
|
return MEMTX_ERROR;
|
||||||
|
}
|
||||||
|
|
||||||
switch (offset) {
|
switch (offset) {
|
||||||
/* reads of set and clear both return the status */
|
/* reads of set and clear both return the status */
|
||||||
case 0x100 ... 0x13f: /* NVIC Set enable */
|
case 0x100 ... 0x13f: /* NVIC Set enable */
|
||||||
|
@ -826,11 +841,13 @@ static uint64_t nvic_sysreg_read(void *opaque, hwaddr addr,
|
||||||
}
|
}
|
||||||
|
|
||||||
trace_nvic_sysreg_read(addr, val, size);
|
trace_nvic_sysreg_read(addr, val, size);
|
||||||
return val;
|
*data = val;
|
||||||
|
return MEMTX_OK;
|
||||||
}
|
}
|
||||||
|
|
||||||
static void nvic_sysreg_write(void *opaque, hwaddr addr,
|
static MemTxResult nvic_sysreg_write(void *opaque, hwaddr addr,
|
||||||
uint64_t value, unsigned size)
|
uint64_t value, unsigned size,
|
||||||
|
MemTxAttrs attrs)
|
||||||
{
|
{
|
||||||
NVICState *s = (NVICState *)opaque;
|
NVICState *s = (NVICState *)opaque;
|
||||||
uint32_t offset = addr;
|
uint32_t offset = addr;
|
||||||
|
@ -839,6 +856,11 @@ static void nvic_sysreg_write(void *opaque, hwaddr addr,
|
||||||
|
|
||||||
trace_nvic_sysreg_write(addr, value, size);
|
trace_nvic_sysreg_write(addr, value, size);
|
||||||
|
|
||||||
|
if (attrs.user && !nvic_user_access_ok(s, addr)) {
|
||||||
|
/* Generate BusFault for unprivileged accesses */
|
||||||
|
return MEMTX_ERROR;
|
||||||
|
}
|
||||||
|
|
||||||
switch (offset) {
|
switch (offset) {
|
||||||
case 0x100 ... 0x13f: /* NVIC Set enable */
|
case 0x100 ... 0x13f: /* NVIC Set enable */
|
||||||
offset += 0x80;
|
offset += 0x80;
|
||||||
|
@ -853,7 +875,7 @@ static void nvic_sysreg_write(void *opaque, hwaddr addr,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
nvic_irq_update(s);
|
nvic_irq_update(s);
|
||||||
return;
|
return MEMTX_OK;
|
||||||
case 0x200 ... 0x23f: /* NVIC Set pend */
|
case 0x200 ... 0x23f: /* NVIC Set pend */
|
||||||
/* the special logic in armv7m_nvic_set_pending()
|
/* the special logic in armv7m_nvic_set_pending()
|
||||||
* is not needed since IRQs are never escalated
|
* is not needed since IRQs are never escalated
|
||||||
|
@ -870,9 +892,9 @@ static void nvic_sysreg_write(void *opaque, hwaddr addr,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
nvic_irq_update(s);
|
nvic_irq_update(s);
|
||||||
return;
|
return MEMTX_OK;
|
||||||
case 0x300 ... 0x33f: /* NVIC Active */
|
case 0x300 ... 0x33f: /* NVIC Active */
|
||||||
return; /* R/O */
|
return MEMTX_OK; /* R/O */
|
||||||
case 0x400 ... 0x5ef: /* NVIC Priority */
|
case 0x400 ... 0x5ef: /* NVIC Priority */
|
||||||
startvec = 8 * (offset - 0x400) + NVIC_FIRST_IRQ; /* vector # */
|
startvec = 8 * (offset - 0x400) + NVIC_FIRST_IRQ; /* vector # */
|
||||||
|
|
||||||
|
@ -880,26 +902,28 @@ static void nvic_sysreg_write(void *opaque, hwaddr addr,
|
||||||
set_prio(s, startvec + i, (value >> (i * 8)) & 0xff);
|
set_prio(s, startvec + i, (value >> (i * 8)) & 0xff);
|
||||||
}
|
}
|
||||||
nvic_irq_update(s);
|
nvic_irq_update(s);
|
||||||
return;
|
return MEMTX_OK;
|
||||||
case 0xd18 ... 0xd23: /* System Handler Priority. */
|
case 0xd18 ... 0xd23: /* System Handler Priority. */
|
||||||
for (i = 0; i < size; i++) {
|
for (i = 0; i < size; i++) {
|
||||||
unsigned hdlidx = (offset - 0xd14) + i;
|
unsigned hdlidx = (offset - 0xd14) + i;
|
||||||
set_prio(s, hdlidx, (value >> (i * 8)) & 0xff);
|
set_prio(s, hdlidx, (value >> (i * 8)) & 0xff);
|
||||||
}
|
}
|
||||||
nvic_irq_update(s);
|
nvic_irq_update(s);
|
||||||
return;
|
return MEMTX_OK;
|
||||||
}
|
}
|
||||||
if (size == 4) {
|
if (size == 4) {
|
||||||
nvic_writel(s, offset, value);
|
nvic_writel(s, offset, value);
|
||||||
return;
|
return MEMTX_OK;
|
||||||
}
|
}
|
||||||
qemu_log_mask(LOG_GUEST_ERROR,
|
qemu_log_mask(LOG_GUEST_ERROR,
|
||||||
"NVIC: Bad write of size %d at offset 0x%x\n", size, offset);
|
"NVIC: Bad write of size %d at offset 0x%x\n", size, offset);
|
||||||
|
/* This is UNPREDICTABLE; treat as RAZ/WI */
|
||||||
|
return MEMTX_OK;
|
||||||
}
|
}
|
||||||
|
|
||||||
static const MemoryRegionOps nvic_sysreg_ops = {
|
static const MemoryRegionOps nvic_sysreg_ops = {
|
||||||
.read = nvic_sysreg_read,
|
.read_with_attrs = nvic_sysreg_read,
|
||||||
.write = nvic_sysreg_write,
|
.write_with_attrs = nvic_sysreg_write,
|
||||||
.endianness = DEVICE_NATIVE_ENDIAN,
|
.endianness = DEVICE_NATIVE_ENDIAN,
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue