tcg: Enforce single page access in probe_write()

[mirror_qemu.git] / accel / tcg / user-exec.c

diff --git a/accel/tcg/user-exec.c b/accel/tcg/user-exec.c
index 86e68272011b97d8a57077665929c692204a810f..625c33f893e8f1cf891de2f90c8128347c596daa 100644 (file)
--- a/accel/tcg/user-exec.c
+++ b/accel/tcg/user-exec.c
@@ -191,6 +191,8 @@ static inline int handle_cpu_signal(uintptr_t pc, siginfo_t *info,
 void probe_write(CPUArchState *env, target_ulong addr, int size, int mmu_idx,
                  uintptr_t retaddr)
 {
+    g_assert(-(addr | TARGET_PAGE_MASK) >= size);
+
     if (!guest_addr_valid(addr) ||
         page_check_range(addr, size, PAGE_WRITE) < 0) {
         CPUState *cpu = env_cpu(env);