Re: [Qemu-devel] MIPS little endian - Bug when decoding physaddr

[Aurelien Jarno]

On 2017-06-23 15:14, Vinicius Maciel wrote:
> Hi everyone,
> 
> I'm having a problem similar to the reported in this email, but now I'm
> trying to emulate a MIPS 24KEc,
> ralink RT5350F.
> 
> Assembly Code:
> 0x802006a0 <reset+672>: lui t5,0xb011
> 0x802006a4 <reset+676>: ori t5,t5,0x168
> 0x802006a8 <reset+680>: li t6,23
> 0x802006ac <reset+684>: nop
> 0x802006b0 <reset+688>: sw t6,0(t5) <---
> 
> The instruction "sw t6,0(t5)" try to write to address 0xb0110168 (0x10110168),
> but Qemu decodes
> this address to 2952790112 (0xb0000060). Is this address right?

sw is a write instruction...

> Qemu Debug:
> #0  io_readx (env=0x5555566e4a78, iotlbentry=0x5555566ec348,
> addr=2952790112,
>     retaddr=140737129226144, size=4)
>     at /home/vini/projs/emuladores/qemu-routers/cputlb.c:786
> #1  0x00005555557c9a02 in io_readl (env=0x5555566e4a78, mmu_idx=0, index=0,
>     addr=2952790112, retaddr=140737129226144)
>     at /home/vini/projs/emuladores/qemu-routers/softmmu_template.h:104
> #2  0x00005555557c9b89 in helper_le_ldul_mmu (env=0x5555566e4a78,
> addr=2952790112, <----
>     oi=32, retaddr=140737129226144)
>     at /home/vini/projs/emuladores/qemu-routers/softmmu_template.h:141
> #3  0x00007fffea982108 in code_gen_buffer ()

... while helper_le_ldul_mmu and io_readl are read functions. The
assembly code and the backtrace do not match. We can not conclude
anything.

Aurelien


-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
address@hidden                 http://www.aurel32.net