qxl/update_area_io: guest_bug on invalid parameters

[qemu.git] / hw / mcf_uart.c

diff --git a/hw/mcf_uart.c b/hw/mcf_uart.c
index d16bac73376904135d5bab8bdf7c4f55f32fcd2a..ec6a87f238ff57718b55fde6aee7de5762275e28 100644 (file)
--- a/hw/mcf_uart.c
+++ b/hw/mcf_uart.c
@@ -3,13 +3,15 @@
  *
  * Copyright (c) 2007 CodeSourcery.
  *
  *
  * Copyright (c) 2007 CodeSourcery.
  *

- * This code is licenced under the GPL
+ * This code is licensed under the GPL

  */
 #include "hw.h"
 #include "mcf.h"
 #include "qemu-char.h"
  */
 #include "hw.h"
 #include "mcf.h"
 #include "qemu-char.h"

+#include "exec-memory.h"

 
 typedef struct {
 
 typedef struct {

+    MemoryRegion iomem;

     uint8_t mr[2];
     uint8_t sr;
     uint8_t isr;
     uint8_t mr[2];
     uint8_t sr;
     uint8_t isr;


@@ -64,7 +66,8 @@ static void mcf_uart_update(mcf_uart_state *s)
     qemu_set_irq(s->irq, (s->isr & s->imr) != 0);
 }
 
     qemu_set_irq(s->irq, (s->isr & s->imr) != 0);
 }
 

-uint32_t mcf_uart_read(void *opaque, target_phys_addr_t addr)
+uint64_t mcf_uart_read(void *opaque, target_phys_addr_t addr,
+                       unsigned size)

 {
     mcf_uart_state *s = (mcf_uart_state *)opaque;
     switch (addr & 0x3f) {
 {
     mcf_uart_state *s = (mcf_uart_state *)opaque;
     switch (addr & 0x3f) {


@@ -110,7 +113,7 @@ static void mcf_uart_do_tx(mcf_uart_state *s)
 {
     if (s->tx_enabled && (s->sr & MCF_UART_TxEMP) == 0) {
         if (s->chr)
 {
     if (s->tx_enabled && (s->sr & MCF_UART_TxEMP) == 0) {
         if (s->chr)

-            qemu_chr_write(s->chr, (unsigned char *)&s->tb, 1);
+            qemu_chr_fe_write(s->chr, (unsigned char *)&s->tb, 1);

         s->sr |= MCF_UART_TxEMP;
     }
     if (s->tx_enabled) {
         s->sr |= MCF_UART_TxEMP;
     }
     if (s->tx_enabled) {


@@ -182,7 +185,8 @@ static void mcf_do_command(mcf_uart_state *s, uint8_t cmd)
     }
 }
 
     }
 }
 

-void mcf_uart_write(void *opaque, target_phys_addr_t addr, uint32_t val)
+void mcf_uart_write(void *opaque, target_phys_addr_t addr,
+                    uint64_t val, unsigned size)

 {
     mcf_uart_state *s = (mcf_uart_state *)opaque;
     switch (addr & 0x3f) {
 {
     mcf_uart_state *s = (mcf_uart_state *)opaque;
     switch (addr & 0x3f) {


@@ -272,7 +276,7 @@ void *mcf_uart_init(qemu_irq irq, CharDriverState *chr)
 {
     mcf_uart_state *s;
 
 {
     mcf_uart_state *s;
 

-    s = qemu_mallocz(sizeof(mcf_uart_state));
+    s = g_malloc0(sizeof(mcf_uart_state));

     s->chr = chr;
     s->irq = irq;
     if (chr) {
     s->chr = chr;
     s->irq = irq;
     if (chr) {


@@ -283,27 +287,20 @@ void *mcf_uart_init(qemu_irq irq, CharDriverState *chr)
     return s;
 }
 
     return s;
 }
 

-
-static CPUReadMemoryFunc * const mcf_uart_readfn[] = {
-   mcf_uart_read,
-   mcf_uart_read,
-   mcf_uart_read
-};
-
-static CPUWriteMemoryFunc * const mcf_uart_writefn[] = {
-   mcf_uart_write,
-   mcf_uart_write,
-   mcf_uart_write
+static const MemoryRegionOps mcf_uart_ops = {
+    .read = mcf_uart_read,
+    .write = mcf_uart_write,
+    .endianness = DEVICE_NATIVE_ENDIAN,

 };
 
 };
 

-void mcf_uart_mm_init(target_phys_addr_t base, qemu_irq irq,
+void mcf_uart_mm_init(MemoryRegion *sysmem,
+                      target_phys_addr_t base,
+                      qemu_irq irq,

                       CharDriverState *chr)
 {
     mcf_uart_state *s;
                       CharDriverState *chr)
 {
     mcf_uart_state *s;

-    int iomemtype;

 
     s = mcf_uart_init(irq, chr);
 
     s = mcf_uart_init(irq, chr);

-    iomemtype = cpu_register_io_memory(mcf_uart_readfn,
-                                       mcf_uart_writefn, s);
-    cpu_register_physical_memory(base, 0x40, iomemtype);
+    memory_region_init_io(&s->iomem, &mcf_uart_ops, s, "uart", 0x40);
+    memory_region_add_subregion(sysmem, base, &s->iomem);

 }
 }