qemu-system-ppc64 segfaults in helper_ldl_mmu
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
QEMU |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Download a Fedora 19 ISO from:
http://
Compile qemu from git (I'm using 401c227b0a11342
from today).
Run qemu-system-ppc64 like this:
ppc64-softmmu/
Guest gets to yaboot. If you hit return, qemu segfaults:
Program received signal SIGABRT, Aborted.
0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6)
at ../nptl/
56 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);
(gdb) t a a bt
Thread 4 (Thread 0x7fff6eef7700 (LWP 7553)):
#0 sem_timedwait ()
at ../nptl/
#1 0x00005555559a5897 in qemu_sem_timedwait (sem=sem@
ms=
#2 0x000055555577e54c in worker_thread (opaque=
at thread-pool.c:97
#3 0x00007ffff625ec53 in start_thread (arg=0x7fff6eef
at pthread_
#4 0x00007ffff04df13d in clone ()
at ../sysdeps/
Thread 3 (Thread 0x7fff6e605700 (LWP 7547)):
#0 0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6)
at ../nptl/
#1 0x00007ffff0421128 in __GI_abort () at abort.c:90
#2 0x000055555583ea33 in helper_ldl_mmu (env=0x7ffff7fd
mmu_idx=1) at /home/rjones/
#3 0x00007fffab0819d8 in code_gen_buffer ()
#4 0x00005555557aa7ae in cpu_tb_exec (tb_ptr=<optimized out>,
cpu=
#5 cpu_ppc_exec (env=env@
at /home/rjones/
#6 0x00005555557abc35 in tcg_cpu_exec (env=0x7ffff7fd
at /home/rjones/
#7 tcg_exec_all () at /home/rjones/
#8 qemu_tcg_
at /home/rjones/
#9 0x00007ffff625ec53 in start_thread (arg=0x7fff6e60
at pthread_
#10 0x00007ffff04df13d in clone ()
at ../sysdeps/
Thread 1 (Thread 0x7ffff7fa9a40 (LWP 7542)):
#0 0x00007ffff04d4c2f in __GI_ppoll (fds=0x55555648
timeout=
sigmask=
#1 0x0000555555762db9 in ppoll (__ss=0x0, __timeout=
__nfds=
at /usr/include/
#2 qemu_poll_ns (fds=<optimized out>, nfds=<optimized out>,
timeout=
#3 0x000055555572b58c in os_host_
at main-loop.c:228
#4 main_loop_wait (nonblocking=
#5 0x00005555555ef9d8 in main_loop () at vl.c:2090
#6 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>)
at vl.c:4435
description: | updated |
Changed in qemu: | |
status: | Fix Committed → Fix Released |
git bisect points the finger at:
401c227b0a11342 45ec61c6c5a9997 cfc963c8e4 is the first bad commit 45ec61c6c5a9997 cfc963c8e4
commit 401c227b0a11342
Author: Richard Henderson <email address hidden>
Date: Thu Jul 25 07:16:52 2013 -1000
tcg-i386: Use new return-argument ld/st helpers
Discontinue the jump-around- jump-to- jump scheme, trading it for a single
immediate move instruction. The two extra jumps always consume 7 bytes,
whereas the immediate move is either 5 or 7 bytes depending on where the
code_gen_buffer gets located.
Signed-off-by: Richard Henderson <email address hidden>
:040000 040000 dfd9a66c85713cd 1886a3342de1e9a c95d7ea43f df8673dea69bc89 cc2cc979aa24415 e3fea4ed53 M include 4126c63bd567c6b 106eb332c9 87e7ece766168dd a860b513dc97fe5 af28ec2c4b M tcg
:040000 040000 1f7cd5291f2c69b