aarc64-virt: Null-ptr dereference through virtio_write_config
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
QEMU |
New
|
Undecided
|
Unassigned |
Bug Description
Reproducer:
cat << EOF | ./qemu-
-machine virt,accel=qtest -qtest stdio
writel 0x8000f00 0x81818191
write 0x4010008004 0x1 0x06
EOF
Stacktrace:
../hw/intc/
SUMMARY: UndefinedBehavi
OK
[S +0.048579] OK
[R +0.048593] write 0x4010008004 0x1 0x06
../softmmu/
SUMMARY: UndefinedBehavi
AddressSanitize
=======
==637204==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x55b2560417c1 bp 0x7ffefc928270 sp 0x7ffefc928020 T0)
==637204==The signal is caused by a READ memory access.
==637204==Hint: address points to the zero page.
#0 0x55b2560417c1 in addrrange_shift /home/alxndr/
#1 0x55b2560417c1 in address_
#2 0x55b2560408c7 in memory_
#3 0x55b25481e065 in pci_update_mappings /home/alxndr/
#4 0x55b25481cec7 in pci_default_
#5 0x55b254806227 in virtio_write_config /home/alxndr/
#6 0x55b2551f6e65 in pci_host_
#7 0x55b2560481fe in memory_
#8 0x55b256047bfb in access_
#9 0x55b256047467 in memory_
#10 0x55b2563d7ffb in flatview_
#11 0x55b2563cd71b in flatview_write /home/alxndr/
#12 0x55b2563cd71b in address_space_write /home/alxndr/
#13 0x55b256039d35 in qtest_process_
#14 0x55b256032b97 in qtest_process_inbuf /home/alxndr/
#15 0x55b256883286 in fd_chr_read /home/alxndr/
#16 0x7f8d8faf5aae in g_main_
#17 0x55b256ede363 in glib_pollfds_poll /home/alxndr/
#18 0x55b256ede363 in os_host_
#19 0x55b256ede363 in main_loop_wait /home/alxndr/
#20 0x55b255f99599 in qemu_main_loop /home/alxndr/
#21 0x55b2542261fd in main /home/alxndr/
#22 0x7f8d8f59acc9 in __libc_start_main csu/../
#23 0x55b254179bc9 in _start (/home/
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/alxndr/
==637204==ABORTING
summary: |
- arm-virt: Null-ptr dereference through virtio_write_config + aarc64-virt: Null-ptr dereference through virtio_write_config |