Richard Henderson 9f75462065 tcg: Reduce max TB opcode count ... Also, assert that we don't overflow any of two different offsets into the TB. Both unwind and goto_tb both record a uint16_t for later use. This fixes an arm-softmmu test case utilizing NEON in which there is a TB generated that runs to 7800 opcodes, and compiles to 96k on an x86_64 host. This overflows the 16-bit offset in which we record the goto_tb reset offset. Because of that overflow, we install a jump destination that goes to neverland. Boom. With this reduced op count, the same TB compiles to about 48k for aarch64, ppc64le, and x86_64 hosts, and neither assertion fires. Cc: qemu-stable@nongnu.org Reported-by: "Jason A. Donenfeld" <Jason@zx2c4.com> Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> Signed-off-by: Richard Henderson <richard.henderson@linaro.org>		2018-06-15 09:39:53 -10:00
..
tcg-target.h	tcg/ppc: Use constant pool for movi	2017-09-07 11:57:35 -07:00
tcg-target.inc.c	tcg: Reduce max TB opcode count	2018-06-15 09:39:53 -10:00