target-arm: A64: Trap ERET from EL0 at translation time

[qemu.git] / target-arm / translate-a64.c

diff --git a/target-arm/translate-a64.c b/target-arm/translate-a64.c
index bfd139afe54cbad3fbae487d876bb38ec49bd2c3..ec6a39d1d60ed3fc9c6e52e2d5e479707719ac85 100644 (file)
--- a/target-arm/translate-a64.c
+++ b/target-arm/translate-a64.c
@@ -1507,6 +1507,10 @@ static void disas_uncond_b_reg(DisasContext *s, uint32_t insn)
         tcg_gen_movi_i64(cpu_reg(s, 30), s->pc);
         break;
     case 4: /* ERET */
+        if (s->current_pl == 0) {
+            unallocated_encoding(s);
+            return;
+        }
         gen_helper_exception_return(cpu_env);
         s->is_jmp = DISAS_JUMP;
         return;