From d5af25ffbf03b27c336468ed19e24296254aa96c Mon Sep 17 00:00:00 2001
From: David Harris <David_Harris@hmc.edu>
Date: Thu, 25 Jul 2024 09:19:23 -0700
Subject: [PATCH] CHeck legal rnum field when decoding aes64ks1i

---
 src/ieu/bmu/bmuctrl.sv | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ieu/bmu/bmuctrl.sv b/src/ieu/bmu/bmuctrl.sv
index d482616ef..d4a8afe23 100644
--- a/src/ieu/bmu/bmuctrl.sv
+++ b/src/ieu/bmu/bmuctrl.sv
@@ -238,7 +238,7 @@ module bmuctrl import cvw::*;  #(parameter cvw_t P) (
     
     if ((P.ZKND_SUPPORTED | P.ZKNE_SUPPORTED) & P.XLEN == 64) begin // ZKND and ZKNE shared instructions
       casez({OpD, Funct7D, Funct3D})
-        17'b0010011_0011000_001: if (Rs2D[4] == 1'b1)
+        17'b0010011_0011000_001: if (Rs2D[4] == 1'b1 & $unsigned(Rs2D[3:0]) <= 10)
                                    BMUControlsD = `BMUCTRLW'b000_0111_0010_1_0_0_0_1_0_0_0_0_0;  // aes64ks1i - key schedule istr1
           17'b0110011_0111111_000: BMUControlsD = `BMUCTRLW'b000_0111_0011_1_0_0_0_1_0_0_0_0_0;  // aes64ks2 - key schedule istr2
       endcase