ARM validator: continue with extra_load_store_instructions.

src/trusted/validator_arm/baseline_classes.cc

Index: src/trusted/validator_arm/baseline_classes.cc
diff --git a/src/trusted/validator_arm/baseline_classes.cc b/src/trusted/validator_arm/baseline_classes.cc
index 29e5899b67a4b11b431b099f89d7826e4041dfd5..eca7a037e2aba647ea68acdf58db86bb075e358b 100644
--- a/src/trusted/validator_arm/baseline_classes.cc
+++ b/src/trusted/validator_arm/baseline_classes.cc
@@ -82,6 +82,12 @@ int32_t BranchImmediate24::branch_target_offset(Instruction i) const {
 }
 
 // BreakPointAndConstantPoolHead
+SafetyLevel BreakPointAndConstantPoolHead::safety(const Instruction i) const {
+  return i.GetCondition() == Instruction::AL
+      ? MAY_BE_SAFE
+      : UNPREDICTABLE;
+}
+
 bool BreakPointAndConstantPoolHead::
 is_literal_pool_head(const Instruction i) const {
   return i.GetCondition() == Instruction::AL &&
@@ -90,6 +96,13 @@ is_literal_pool_head(const Instruction i) const {
 
 // BranchToRegister
 SafetyLevel BranchToRegister::safety(const Instruction i) const {
+  // Extra NaCl constraint: can't branch to PC. This would branch to 8 bytes
+  // after the current instruction. This instruction should be in an instruction
+  // pair, the mask should therefore be to PC and fail checking, but there's
+  // little harm in checking.
+  if (m.reg(i).Equals(kRegisterPc)) return FORBIDDEN_OPERANDS;
+
+  // Redundant with the above, but this is actually UNPREDICTABLE. Expect DCE.
   if (link_register.IsUpdated(i) && m.reg(i).Equals(kRegisterPc)) {
     return UNPREDICTABLE;
   }
@@ -357,6 +370,7 @@ SafetyLevel LoadStore2RegisterImm8Op::safety(const Instruction i) const {
        // may not check for this. For the moment, we are changing
        // the code to ignore this case for stores.
        // TODO(karl): Should we not allow this?
+       // TODO(jfb) Fix this.
        (is_load_ && n.reg(i).Equals(t.reg(i))))) {
     return UNPREDICTABLE;
   }
@@ -665,10 +679,13 @@ SafetyLevel LoadStore3RegisterOp::safety(const Instruction i) const {
        // may not check for this. For the moment, we are changing
        // the code to ignore this case for stores.
        // TODO(karl): Should we not allow this?
+       // TODO(jfb) Fix this.
        (is_load_ && n.reg(i).Equals(t.reg(i))))) {
     return UNPREDICTABLE;
   }
 
+  // TODO(jfb) if ArchVersion() < 6 && wback && m == n then UNPREDICTABLE;
+
   // Don't let addressing writeback alter PC (NaCl constraint).
   if (defs(i).Contains(kRegisterPc)) return FORBIDDEN_OPERANDS;
 
@@ -714,10 +731,15 @@ SafetyLevel LoadStore3RegisterDoubleOp::safety(const Instruction i) const {
   // may not check for this. For the moment, we are changing
   // the code to ignore this case for stores.
   // TODO(karl): Should we not allow this?
+  // TODO(jfb) Fix this.
   if (is_load_ && HasWriteBack(i) && n.reg(i).Equals(t2.reg(i))) {
     return UNPREDICTABLE;
   }
 
+  if (is_load_ && (m.reg(i).Equals(t.reg(i)) || m.reg(i).Equals(t2.reg(i)))) {
+    return UNPREDICTABLE;
+  }
+
   // Now apply non-double width restrictions for this instruction.
   return LoadStore3RegisterOp::safety(i);
 }