On 12/5/25 15:30, Richard Henderson wrote:
On 12/4/25 12:04, Jim MacArthur wrote:
@@ -6121,8 +6131,16 @@ static void tcr2_el2_write(CPUARMState *env, const ARMCPRegInfo *ri,
      if (cpu_isar_feature(aa64_mec, cpu)) {
          valid_mask |= TCR2_AMEC0 | TCR2_AMEC1;
      }
+    if (cpu_isar_feature(aa64_asid2, cpu)) {
+        valid_mask |= TCR2_FNG1 | TCR2_FNG0 | TCR2_A2;
+        require_flush = true;
+    }
      value &= valid_mask;
      raw_write(env, ri, value);
+
+    if (require_flush) {
+        tlb_flush(CPU(cpu));
+    }

Just because A2 is valid doesn't mean the A2 bit changed.

Compare, for instance, vmsa_ttbr_write, where we notice if the ASID has changed before performing the flush.

Note as well that we don't need to flush all tlbs.  In tcr2_el1_write we know that we are only affecting the EL1&0 regime (alle1_tlbmask).  In tcr2_el2_write, we know that we are only affecting the EL2&0 regime (see the E2H part of vae2_tlbmask).


r~


Before I make a full patch series, can I check this looks correct?

In tcr2_el1_write:

    if (cpu_isar_feature(aa64_asid2, cpu)) {
        uint64_t asid_nonglobal_flags = TCR2_FNG1 | TCR2_FNG0 | TCR2_A2;
        valid_mask |= asid_nonglobal_flags;
        require_flush = ((raw_read(env, ri) ^ value) & asid_nonglobal_flags) != 0;
    }
    value &= valid_mask;
    raw_write(env, ri, value);

    if (require_flush) {
        tlb_flush_by_mmuidx(CPU(cpu), alle1_tlbmask(env));
    }

And then in tcr_el2_write, the same check but flushing by: ARMMMUIdxBit_E20_2 |ARMMMUIdxBit_E20_2_PAN | ARMMMUIdxBit_E20_2_GCS | ARMMMUIdxBit_E20_0 | ARMMMUIdxBit_E20_0_GCS, as used in vmsa_tcr_ttbr_el2_write. This could be factored out into a constant function like alle1_tlbmask.

Jim


Reply via email to