FPE in npcm7xx_clk_update_pll
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
QEMU |
Invalid
|
Undecided
|
Unassigned |
Bug Description
I've been working on integrating the generic-fuzzer with ARM machines on OSS-Fuzz so we can fuzz devices on architectures beyond i386 devices. Since I saw that there is some active development for the Nuvoton machines, I thought it might be useful to fuzz the NPCM750 machine
Reproducer:
cat << EOF | ./qemu-
-accel qtest -qtest stdio
write 0xf080100c 0x4 0x00
write 0xf080100c 0x4 0x00
EOF
Trace:
../hw/misc/
SUMMARY: UndefinedBehavi
AddressSanitize
=======
==717855==ERROR: AddressSanitizer: FPE on unknown address 0x5619201fcd8c (pc 0x5619201fcd8c bp 0x7ffc94214e50 sp 0x7ffc94214e30 T0)
#0 0x5619201fcd8c in npcm7xx_
#1 0x5619201ff5dc in npcm7xx_clk_write /hw/misc/
#2 0x5619214781fe in memory_
#3 0x561921477bfb in access_
#4 0x561921477467 in memory_
#5 0x561921807ffb in flatview_
#6 0x5619217fd71b in flatview_write /softmmu/
#7 0x5619217fd71b in address_space_write /softmmu/
#8 0x561921465eee in qtest_process_
#9 0x561921462b97 in qtest_process_inbuf /softmmu/
#10 0x561921cb3286 in fd_chr_read /chardev/
#11 0x7f4ad283baae in g_main_
#12 0x56192230e363 in glib_pollfds_poll /util/main-
#13 0x56192230e363 in os_host_
#14 0x56192230e363 in main_loop_wait /util/main-
#15 0x5619213c9599 in qemu_main_loop /softmmu/
#16 0x56191f6561fd in main /softmmu/
#17 0x7f4ad22e0cc9 in __libc_start_main csu/../
#18 0x56191f5a9bc9 in _start (/home/
tags: | added: fuzzer |
tags: | added: arm |
Changed in qemu: | |
status: | New → Confirmed |
I moved this report over to QEMU's new bug tracker on gitlab.com.
Please continue with the discussion here:
https:/ /gitlab. com/qemu- project/ qemu/-/ issues/ 549