diff options
author | gibbs <gibbs@FreeBSD.org> | 2010-07-14 14:31:18 +0000 |
---|---|---|
committer | gibbs <gibbs@FreeBSD.org> | 2010-07-14 14:31:18 +0000 |
commit | 6cc9a00e92553e95008045af113d896f5b8c075c (patch) | |
tree | 4c45cb872f5abca9d960f035acfac8156003ad05 /sys/dev/aic7xxx/aicasm | |
parent | b8b00841c93af095bbb283ea2d9a8662a7c55687 (diff) | |
download | FreeBSD-src-6cc9a00e92553e95008045af113d896f5b8c075c.zip FreeBSD-src-6cc9a00e92553e95008045af113d896f5b8c075c.tar.gz |
Correct logic bug in aicasm's undefined register bit access detection code.
The code in question verifies that all register write operations only change
bits that are defined (in the register definition file) for that effected
register. The bug effectively disabled this checking.
o Fix the check by testing the opcode against all supported read ("and" based)
operands.
o Add missing bit definitions to the aic7xxx and aic79xx register definition
files so that the warning (treated as a fatal error) does not spuriously
fire.
Reported by: Pawel Worach <pawel.worach@gmail.com>
MFC after: 1 week
Diffstat (limited to 'sys/dev/aic7xxx/aicasm')
-rw-r--r-- | sys/dev/aic7xxx/aicasm/aicasm_gram.y | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/sys/dev/aic7xxx/aicasm/aicasm_gram.y b/sys/dev/aic7xxx/aicasm/aicasm_gram.y index 91ae8ea..d50d2b9 100644 --- a/sys/dev/aic7xxx/aicasm/aicasm_gram.y +++ b/sys/dev/aic7xxx/aicasm/aicasm_gram.y @@ -1821,9 +1821,15 @@ type_check(symbol_t *symbol, expression_t *expression, int opcode) { symbol_node_t *node; int and_op; + uint8_t invalid_bits; and_op = FALSE; - if (opcode == AIC_OP_AND || opcode == AIC_OP_JNZ || AIC_OP_JZ) + if (opcode == AIC_OP_AND + || opcode == AIC_OP_BMOV + || opcode == AIC_OP_JE + || opcode == AIC_OP_JNE + || opcode == AIC_OP_JNZ + || opcode == AIC_OP_JZ) and_op = TRUE; /* @@ -1831,12 +1837,11 @@ type_check(symbol_t *symbol, expression_t *expression, int opcode) * that hasn't been defined. If this is an and operation, * this is a mask, so "undefined" bits are okay. */ - if (and_op == FALSE - && (expression->value & ~symbol->info.rinfo->valid_bitmask) != 0) { + invalid_bits = expression->value & ~symbol->info.rinfo->valid_bitmask; + if (and_op == FALSE && invalid_bits != 0) { snprintf(errbuf, sizeof(errbuf), "Invalid bit(s) 0x%x in immediate written to %s", - expression->value & ~symbol->info.rinfo->valid_bitmask, - symbol->name); + invalid_bits, symbol->name); stop(errbuf, EX_DATAERR); /* NOTREACHED */ } |