diff options
| author | Magnus Lindholm <linmag7@gmail.com> | 2026-10-09 01:12:59 +0200 |
|---|---|---|
| committer | Magnus Lindholm <linmag7@gmail.com> | 2026-10-18 20:43:28 +0200 |
| commit | a182df7ceae5d75a7fdc5dc211ccebdd821697bf (patch) | |
| tree | 3c0d64c2a26729121f436c2464de746fb123d0a2 /scripts | |
| parent | 6634cb1490ba8d3d7fccfbbf4028e702da4e2e8f (diff) | |
alpha: bound EV6 logout decoding by the processor area
The ES40 Service Guide, Table D-19, documents a correctable frame with
its system area at 0x58 and total size 0x80. The existing EV6 decoder
interprets system words as extended CPU registers and reads past its end.
This establishes the layout for ES40; whether Titan and Nautilus PALcode
also emits this short frame has not been verified.
Validate the processor area before decoding it and only print extended
registers when present. Preserve rejected frames with a raw dump rather
than trusting their invalid offsets. Cap the dump at 1 KiB and round down
to complete quadwords. This still relies on firmware supplying an
accessible frame of its advertised size; the cap is not pointer validation.
Signed-off-by: Magnus Lindholm <linmag7@gmail.com>
Reviewed-by: Matt Turner <mattst88@gmail.com>
Signed-off-by: Magnus Lindholm <linmag7@gmail.com>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions
