qemu-patch-raspberry4/hw/net
Philippe Mathieu-Daudé baba731bc6 hw/net/i82596: Correct command bitmask (CID 1419392)
The command is 32-bit, but we are loading the 16 upper bits with
the 'get_uint16(s->scb + 2)' call.

Once shifted by 16, the command bits match the status bits:

- Command
  Bit 31 ACK-CX   Acknowledges that the CU completed an Action Command.
  Bit 30 ACK-FR   Acknowledges that the RU received a frame.
  Bit 29 ACK-CNA  Acknowledges that the Command Unit became not active.
  Bit 28 ACK-RNR  Acknowledges that the Receive Unit became not ready.

- Status
  Bit 15 CX       The CU finished executing a command with its I(interrupt) bit set.
  Bit 14 FR       The RU finished receiving a frame.
  Bit 13 CNA      The Command Unit left the Active state.
  Bit 12 RNR      The Receive Unit left the Ready state.

Add the SCB_COMMAND_ACK_MASK definition to simplify the code.

This fixes Coverity 1419392 (CONSTANT_EXPRESSION_RESULT):

  /hw/net/i82596.c: 352 in examine_scb()
  346         cuc = (command >> 8) & 0x7;
  347         ruc = (command >> 4) & 0x7;
  348         DBG(printf("MAIN COMMAND %04x  cuc %02x ruc %02x\n", command, cuc, ruc));
  349         /* and clear the scb command word */
  350         set_uint16(s->scb + 2, 0);
  351
  >>>     CID 1419392:    (CONSTANT_EXPRESSION_RESULT)
  >>>     "command & (2147483648UL /* 1UL << 31 */)" is always 0 regardless of the values of its operands. This occurs as the logical operand of "if".
  352         if (command & BIT(31))      /* ACK-CX */
  353             s->scb_status &= ~SCB_STATUS_CX;
  >>>     CID 1419392:    (CONSTANT_EXPRESSION_RESULT)
  >>>     "command & (1073741824UL /* 1UL << 30 */)" is always 0 regardless of the values of its operands. This occurs as the logical operand of "if".
  354         if (command & BIT(30))      /*ACK-FR */
  355             s->scb_status &= ~SCB_STATUS_FR;
  >>>     CID 1419392:    (CONSTANT_EXPRESSION_RESULT)
  >>>     "command & (536870912UL /* 1UL << 29 */)" is always 0 regardless of the values of its operands. This occurs as the logical operand of "if".
  356         if (command & BIT(29))      /*ACK-CNA */
  357             s->scb_status &= ~SCB_STATUS_CNA;
  >>>     CID 1419392:    (CONSTANT_EXPRESSION_RESULT)
  >>>     "command & (268435456UL /* 1UL << 28 */)" is always 0 regardless of the values of its operands. This occurs as the logical operand of "if".
  358         if (command & BIT(28))      /*ACK-RNR */
  359             s->scb_status &= ~SCB_STATUS_RNR;

Fixes: Covertiy CID 1419392 (commit 376b851909)
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2020-03-31 21:14:35 +08:00
..
can qemu_log_lock/unlock now preserves the qemu_logfile handle. 2019-12-18 20:18:02 +00:00
fsl_etsec qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
rocker hw/net/rocker: Report unimplemented feature with qemu_log_mask(UNIMP) 2020-02-18 20:20:49 +01:00
allwinner-sun8i-emac.c hw/arm/allwinner-h3: add EMAC ethernet device 2020-03-12 16:27:33 +00:00
allwinner_emac.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
cadence_gem.c hw: net: cadence_gem: Fix build errors in DB_PRINT() 2020-03-03 18:04:47 +08:00
dp8393x.c hw/net: Use memory_region_init_rom() with read-only regions 2020-03-17 15:18:47 +01:00
e1000.c hw/net/e1000: Move macreg[] arrays to .rodata to save 1MiB of .data 2020-03-09 15:59:31 +01:00
e1000_regs.h e1000: Rename the SEC symbol to SEQEC 2017-09-08 08:17:37 +08:00
e1000e.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
e1000e_core.c hw/net/e1000: Move macreg[] arrays to .rodata to save 1MiB of .data 2020-03-09 15:59:31 +01:00
e1000e_core.h Supply missing header guards 2019-06-12 13:20:21 +02:00
e1000x_common.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
e1000x_common.h Supply missing header guards 2019-06-12 13:20:21 +02:00
eepro100.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
etraxfs_eth.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
ftgmac100.c ftgmac100: check RX and TX buffer alignment 2020-01-30 16:02:02 +00:00
i82596.c hw/net/i82596: Correct command bitmask (CID 1419392) 2020-03-31 21:14:35 +08:00
i82596.h hppa: Add support for LASI chip with i82596 NIC 2020-01-27 10:49:51 -08:00
imx_fec.c hw/net/imx_fec: write TGSR and TCSR3 in imx_enet_write() 2020-03-17 11:23:14 +00:00
Kconfig hw/arm/allwinner-h3: add EMAC ethernet device 2020-03-12 16:27:33 +00:00
lan9118.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
lance.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
lasi_i82596.c Avoid address_space_rw() with a constant is_write argument 2020-02-20 14:47:08 +01:00
Makefile.objs hw/arm/allwinner-h3: add EMAC ethernet device 2020-03-12 16:27:33 +00:00
mcf_fec.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
milkymist-minimac2.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
mipsnet.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
ne2000-isa.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
ne2000-pci.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
ne2000.c Clean up inclusion of sysemu/sysemu.h 2019-08-16 13:31:53 +02:00
ne2000.h Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
net_rx_pkt.c NetRxPkt: fix hash calculation of IPV6 TCP 2020-03-03 18:04:47 +08:00
net_rx_pkt.h NetRxPkt: Introduce support for additional hash types 2020-03-03 18:04:47 +08:00
net_tx_pkt.c net: fix misaligned member access 2018-03-02 18:44:00 +00:00
net_tx_pkt.h clean-includes: run it once more 2016-06-16 18:39:03 +02:00
opencores_eth.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
pcnet-pci.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
pcnet.c Clean up inclusion of sysemu/sysemu.h 2019-08-16 13:31:53 +02:00
pcnet.h lance: replace PROP_PTR with PROP_LINK 2020-01-07 17:24:29 +04:00
rtl8139.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
smc91c111.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
spapr_llan.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
stellaris_enet.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
sungem.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
sunhme.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
trace-events hw/arm/allwinner-h3: add EMAC ethernet device 2020-03-12 16:27:33 +00:00
tulip.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
tulip.h net: add tulip (dec21143) driver 2019-10-29 10:28:07 +08:00
vhost_net-stub.c vhost-net: move stubs to a separate file 2019-02-21 12:28:01 -05:00
vhost_net.c vhost_net: enable packed ring support 2019-10-25 07:46:22 -04:00
virtio-net.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
vmware_utils.h hw/net/vmxnet3: Fix code to work on big endian hosts, too 2017-11-20 11:08:00 +08:00
vmxnet3.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
vmxnet3.h hw/net/vmxnet3: Fix code to work on big endian hosts, too 2017-11-20 11:08:00 +08:00
vmxnet3_defs.h Supply missing header guards 2019-06-12 13:20:21 +02:00
vmxnet_debug.h Clean up ill-advised or unusual header guards 2016-07-12 16:20:46 +02:00
xen_nic.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
xgmac.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
xilinx_axienet.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00
xilinx_ethlite.c qdev: set properties with device_class_set_props() 2020-01-24 20:59:15 +01:00