[Qemu-devel] Bug in mips user-linux

[tg@gmplib.org (Torbjörn Granlund)]

[-- Attachment #1: Type: text/plain, Size: 889 bytes --]

This is a long-standing issue; I've reproduced it in 2.5.0, 2.6.2, and
2.7.0.

Command used:  qemu-mipsn32 ./reuse

The binary file 'reuse' is attached.

Funnily enough, it does not fail every time.  (I would expect user-level
emulation to be pretty deterministic, but alas, this is not.)

When it fails, it either says,

  qemu: uncaught target signal 11 (Segmentation fault) - core dumped
  Segmentation fault

or unfrequently,

  mipsn: /var/tmp/build.2567/qemu-2.6.2/translate-all.c:1884: page_set_flags: Assertion `start < end' failed.
  qemu: uncaught target signal 6 (Aborted) - core dumped

while the same binary runs fine on hardware as well as
emulated systems running under qemu-system-mips64.

The failures only happen for the n32 ABI (not o32 or 64).

This test case comes from GMP (default gcc compile of
gmp/tests/mpz/reuse.c).

(Host and guest systems all run Debian 8.)



[-- Attachment #2: reuse.xz --]
[-- Type: application/octet-stream, Size: 357368 bytes --]

[-- Attachment #3: Type: text/plain, Size: 55 bytes --]



-- 
Torbjörn
Please encrypt, key id 0xC8601622