hw/riscv/riscv-iommu: fix FSC SV32 capability check
Fix a mode-to-capability comparison error in riscv_iommu_validate_device_ctx. The code was comparing fsc_mode (a value) against a capability bitmask, making the SV32 support check ineffective. This issue was discovered and reported by SpecHunter, an AI-driven architecture specification analysis tool. Link: https://github.com/yizishun/rv-isa-sec/blob/master/output/riscv-iommu/pr-694/qemu.txt Signed-off-by: Zishun Yi <vulab@iscas.ac.cn> Reviewed-by: Daniel Henrique Barboza <daniel.barboza@oss.qualcomm.com> Message-ID: <20260511080904.3049446-1-vulab@iscas.ac.cn> Signed-off-by: Alistair Francis <alistair.francis@wdc.com>
Zishun Yi committed
May 11, 2026 at 16:09 UTC
a6b6a5a3397937098c0cab001bce71c659bdeb04
1 file changed
+1
-1
hw/riscv/riscv-iommu.c
+1
-1
@@ -807,7 +807,7 @@ static bool riscv_iommu_validate_device_ctx(RISCVIOMMUState *s,
807
}
808
809
if (ctx->tc & RISCV_IOMMU_DC_TC_SXL) {
810
- if (fsc_mode == RISCV_IOMMU_CAP_SV32 &&
810
+ if (fsc_mode == RISCV_IOMMU_DC_FSC_IOSATP_MODE_SV32 &&
811
!(s->cap & RISCV_IOMMU_CAP_SV32)) {
812
return false;
813
}