[Qemu-devel] Segmentation fault booting arm-test-0.2.tar.gz

[Qemu-devel] Segmentation fault booting arm-test-0.2.tar.gz

[Lars Munch]

[-- Attachment #1: Type: text/plain, Size: 983 bytes --]

Hi

With latest svn I get segmentation fault while booting the testimage arm-test-0.2.tar.gz:

qemu-system-arm -kernel zImage.integrator -initrd arm_root.img -nographic -append "console=ttyAMA0"
Uncompressing Linux................Segmentation fault

Reverting to svn version 4137 (just before the arm convertion to TCG)
everything works fine.

I am building with gcc-3.4 (GCC) 3.4.6 (Debian 3.4.6-7)

Attached is a full backtrace.

Regards
Lars Munch

(gdb) bt
#0  tb_reset_jump_recursive (tb=0x12fe14) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1024
#1  0x08105431 in cpu_interrupt (env=0x9c68100, mask=1) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1230
#2  0x0804d806 in host_alarm_handler (host_signum=14) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:1203
#3  <signal handler called>
#4  0x08108bff in cpu_arm_exec (env1=0x1) at /home/lmc/Projects/qemu/qemu-rHEAD/cpu-exec.c:223
#5  0x08058a3d in main (argc=15172, argv=0x5f60) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:7549



[-- Attachment #2: backtrace.log --]
[-- Type: text/plain, Size: 3072 bytes --]

#0  tb_reset_jump_recursive (tb=0x12fe14) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1024
No locals.
#1  0x08105431 in cpu_interrupt (env=0x9c68100, mask=1) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1230
        tb = (TranslationBlock *) 0x12fe14
        interrupt_lock = 1
#2  0x0804d806 in host_alarm_handler (host_signum=14) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:1203
        env = (CPUARMState *) 0x0
#3  <signal handler called>
No symbol table info available.
#4  0x08108bff in cpu_arm_exec (env1=0x1) at /home/lmc/Projects/qemu/qemu-rHEAD/cpu-exec.c:223
        reg_AREG0 = (host_reg_t) 0x9c68100
        saved_AREG0 = (volatile host_reg_t) 0xbfad4f58
        reg_AREG1 = (host_reg_t) 0x0
        saved_AREG1 = (volatile host_reg_t) 0x1
        reg_AREG2 = (host_reg_t) 0x5
        saved_AREG2 = (volatile host_reg_t) 0x9c68100
        reg_AREG3 = (host_reg_t) 0x0
        saved_AREG3 = (volatile host_reg_t) 0x0
        ret = 0
        interrupt_request = 0
        tb = (TranslationBlock *) 0x1
        tc_ptr = (unsigned char *) 0x0
#5  0x08058a3d in main (argc=15172, argv=0x5f60) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:7549
        use_gdbstub = 0
        gdbstub_port = 0x0
        boot_devices_bitmap = 0
        i = 0
        snapshot = 0
        linux_boot = 0
        initrd_filename = 0x0
        kernel_filename = 0x0
        kernel_cmdline = 0x0
        boot_devices = 0x0
        cyls = 0
        heads = 0
        secs = 0
        translation = 0
        net_clients = {
  0x805b800 "U\211å\203ì\b\203}\f\002t\004ÉÃf\220\213\r\004\215\035\b\205Ét\006Éé ÷ÿÿÇ\004$À \030\bº9X\031\b\211T$\004è\033Öÿÿëã\211ö\215¼'", 0x8074be0 "U\211å\213M\f\213E\b\205Ét\003]Ã\220]º", 0x0, 0x0, 0x0, 0x9c755e8 "", 0x0, 0x0, 0x9c65530 "Pê\004\bÐë\004\b", 0x0, 
  0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2 <Address 0x2 out of bounds>, 0x0, 0x0, 0x0, 0x39 <Address 0x39 out of bounds>, 
  0x804e2e0 "U\211å\213E\020]Ã\220\215´&", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}
        nb_net_clients = 0
        hda_index = 0
        optind = 0
        r = 0x0
        optarg = 0x0
        monitor_hd = (CharDriverState *) 0x0
        monitor_device = 0x0
        serial_devices = {0x805af00 "U\211å\203ì\030\211uø\213u\020\211]ô1Û9ó\211}ü\213}\f}\026\220\215t&", 
  0x8074bd0 "U\211å\213U\f\213E\b]\017¶\022ë\221\220U\211å\213M\f\213E\b\205Ét\003]Ã\220]º", 0x0, 0x0}
        serial_device_index = 0
        parallel_devices = {0x805aef0 "U¸\200", 0x8074b40 "U\211å\213E\bö@\f\020t\f\203xt\017]\017\236À\017¶ÀÃ\203xt", 0x0}
        parallel_device_index = 0
        loadvm = 0x0
        machine = (QEMUMachine *) 0x0
        cpu_model = 0x0
        usb_devices = {0x9c755e8 "", 0x0, 0x0, 
  0x804e4f0 "U\211åVS\203ì\020\213E\b\213p,\213X(ë:\213\f³\205Ét;\213D³0\211\004$ÿ\024³\205Àt-¸\001", 0x9c68048 "ð®\005\b@K\a\b", 
  0x1 <Address 0x1 out of bounds>, 0x0, 0x81 <Address 0x81 out of bounds>}
        usb_devices_index = 0
        fds = {0, 0}
        pid_file = 0x0
        vlan = (VLANState *) 0x0

Re: [Qemu-devel] Segmentation fault booting arm-test-0.2.tar.gz

[Blue Swirl]

On 4/19/08, Lars Munch <lars@segv.dk> wrote:
> Hi
>
>  With latest svn I get segmentation fault while booting the testimage arm-test-0.2.tar.gz:
>
>  qemu-system-arm -kernel zImage.integrator -initrd arm_root.img -nographic -append "console=ttyAMA0"
>  Uncompressing Linux................Segmentation fault
>
>  Reverting to svn version 4137 (just before the arm convertion to TCG)
>  everything works fine.
>
>  I am building with gcc-3.4 (GCC) 3.4.6 (Debian 3.4.6-7)
>
>  Attached is a full backtrace.
>
>  Regards
>  Lars Munch
>
>  (gdb) bt
>  #0  tb_reset_jump_recursive (tb=0x12fe14) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1024
>  #1  0x08105431 in cpu_interrupt (env=0x9c68100, mask=1) at /home/lmc/Projects/qemu/qemu-rHEAD/exec.c:1230
>  #2  0x0804d806 in host_alarm_handler (host_signum=14) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:1203
>  #3  <signal handler called>
>  #4  0x08108bff in cpu_arm_exec (env1=0x1) at /home/lmc/Projects/qemu/qemu-rHEAD/cpu-exec.c:223
>  #5  0x08058a3d in main (argc=15172, argv=0x5f60) at /home/lmc/Projects/qemu/qemu-rHEAD/vl.c:7549

I guess you are on i386 host. Because of exactly the same symptoms, I
have not committed the final pieces of Sparc TCG conversion. I suspect
the problem is that one of ESI/EDI/EBX is not saved when they should.
Adding function prologue/epilogue to TCG should help, Fabrice said
he's working on it.

Re: [Qemu-devel] Segmentation fault booting arm-test-0.2.tar.gz

[Alexander Graf]

On Apr 19, 2008, at 6:13 PM, Blue Swirl wrote:

> On 4/19/08, Lars Munch <lars@segv.dk> wrote:
>> Hi
>>
>> With latest svn I get segmentation fault while booting the  
>> testimage arm-test-0.2.tar.gz:
>>
>> qemu-system-arm -kernel zImage.integrator -initrd arm_root.img - 
>> nographic -append "console=ttyAMA0"
>> Uncompressing Linux................Segmentation fault
>>
>> Reverting to svn version 4137 (just before the arm convertion to TCG)
>> everything works fine.
>>
>> I am building with gcc-3.4 (GCC) 3.4.6 (Debian 3.4.6-7)
>>
>> Attached is a full backtrace.
>>
>> Regards
>> Lars Munch
>>
>> (gdb) bt
>> #0  tb_reset_jump_recursive (tb=0x12fe14) at /home/lmc/Projects/ 
>> qemu/qemu-rHEAD/exec.c:1024
>> #1  0x08105431 in cpu_interrupt (env=0x9c68100, mask=1) at /home/ 
>> lmc/Projects/qemu/qemu-rHEAD/exec.c:1230
>> #2  0x0804d806 in host_alarm_handler (host_signum=14) at /home/lmc/ 
>> Projects/qemu/qemu-rHEAD/vl.c:1203
>> #3  <signal handler called>
>> #4  0x08108bff in cpu_arm_exec (env1=0x1) at /home/lmc/Projects/ 
>> qemu/qemu-rHEAD/cpu-exec.c:223
>> #5  0x08058a3d in main (argc=15172, argv=0x5f60) at /home/lmc/ 
>> Projects/qemu/qemu-rHEAD/vl.c:7549
>
> I guess you are on i386 host. Because of exactly the same symptoms, I
> have not committed the final pieces of Sparc TCG conversion. I suspect
> the problem is that one of ESI/EDI/EBX is not saved when they should.
> Adding function prologue/epilogue to TCG should help, Fabrice said
> he's working on it.

He did? Last mail I remember was that he told us how to do it. It very  
much sounded like he's lacking the time to actually implement it.

Alex

>
>
>