On 05/24/2017 10:54 AM, Aurelien Jarno wrote:
It seems the problem arise if an interrupt happens when the TB
containing the EXECUTE instruction is being executed. In that case at
the end of the TB, the interruption code is translated with the ex_value
set, which means with the wrong PC, wrong permissions and wrong return
address.

This is the same kind of issue I identified on SH4 recently:
https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03880.html

The same king of solution also works, that is disabling the interrupts
when the ex_value is set:

diff --git a/target/s390x/helper.c b/target/s390x/helper.c
index 6f81b1a16c..a33abdef16 100644
--- a/target/s390x/helper.c
+++ b/target/s390x/helper.c
@@ -655,6 +657,10 @@ bool s390_cpu_exec_interrupt(CPUState *cs, int 
interrupt_request)
          S390CPU *cpu = S390_CPU(cs);
          CPUS390XState *env = &cpu->env;
+ if (env->ex_value) {
+            return false;
+        }
+
          if (env->psw.mask & PSW_MASK_EXT) {
              s390_cpu_do_interrupt(cs);
              return true;


Thanks for the research.  I've incorporated this into my patch set.


r~

Reply via email to