Closed
Description
We found the mask for mcontrol.action is 0x3f, while this field is only 4 bits width.

riscv-isa-sim/riscv/triggers.cc
Line 44 in 89745ab
riscv-isa-sim/riscv/encoding.h
Line 102 in e6a2245
We triggered this bug by randomly writing data to csr.
If users try to set the sizelo field next to it (although it appears that spike does not yet support), it will cause an illegal action to be saved, and then the abort() will be triggered at line 337 below, causing the simulation to end.
riscv-isa-sim/riscv/execute.cc
Lines 327 to 337 in 89745ab
@ProjectDimlight helps reproduce the problem
cc to @timsifive
Metadata
Assignees
Labels
No labels