On 12/21/2017 08:05 AM, Laurent Vivier wrote:
> The first call of set_cc_op() in a new translation sequence
> is done with old_op set to CC_OP_DYNAMIC (-1).
> 
> This will do an out of bound access to the array cc_op_live[].
> 
> We fix that by adding an entry in cc_op_live[] for CC_OP_DYNAMIC.
> 
> Reported-by: Thomas Huth <[email protected]>
> Signed-off-by: Laurent Vivier <[email protected]>
> Reviewed-by: Paolo Bonzini <[email protected]>
> ---
> v2: no need to discard QREG_CC_OP (rth)

Reviewed-by: Richard Henderson <[email protected]>


r~

Reply via email to