From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:41493)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <zhugh.fnst@cn.fujitsu.com>) id 1XtRCH-0001G1-Sc
	for qemu-devel@nongnu.org; Tue, 25 Nov 2014 20:15:16 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <zhugh.fnst@cn.fujitsu.com>) id 1XtRCB-00016l-O2
	for qemu-devel@nongnu.org; Tue, 25 Nov 2014 20:15:09 -0500
Received: from [59.151.112.132] (port=59992 helo=heian.cn.fujitsu.com)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <zhugh.fnst@cn.fujitsu.com>) id 1XtRCB-0000yc-Av
	for qemu-devel@nongnu.org; Tue, 25 Nov 2014 20:15:03 -0500
Message-ID: <1416964439.4151.1.camel@G08FNSTD140041>
From: Zhu Guihua <zhugh.fnst@cn.fujitsu.com>
Date: Wed, 26 Nov 2014 09:13:59 +0800
In-Reply-To: <1416925404.4666.40.camel@localhost.localdomain>
References: <1416924259.4666.38.camel@localhost.localdomain>
	<20141125091256.03b81a5b@redhat.com>
	<1416925404.4666.40.camel@localhost.localdomain>
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: Re: [Qemu-devel] [Regression] hmp: QEMU crash on device_del
	auto-completion
List-Id: <qemu-devel.nongnu.org>
List-Unsubscribe: <https://lists.nongnu.org/mailman/options/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.nongnu.org/archive/html/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <https://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Marcel Apfelbaum <marcel.a@redhat.com>
Cc: Peter Maydell <peter.maydell@linaro.org>, Igor Mammedov <imammedo@redhat.com>, qemu-devel@nongnu.org, Luiz Capitulino <lcapitulino@redhat.com>

On Tue, 2014-11-25 at 16:23 +0200, Marcel Apfelbaum wrote:
> On Tue, 2014-11-25 at 09:12 -0500, Luiz Capitulino wrote:
> > On Tue, 25 Nov 2014 16:04:19 +0200
> > Marcel Apfelbaum <marcel.a@redhat.com> wrote:
> > 
> > > Hi,
> > > 
> > > The commits:
> > >  - 6a1fa9f5 (monitor: add del completion for peripheral device) 
> > >  - 66e56b13 (qdev: add qdev_build_hotpluggable_device_list helper)
> > > 
> > > cause a QEMU crash when trying to use HMP device_del auto-completion.
> > > It can be easily reproduced by:
> > > <qemu-bin> -enable-kvm  ~/images/fedora.qcow2 -monitor stdio -device virtio-net-pci,id=vnet
> > > (qemu) device_del /home/mapfelba/git/upstream/qemu/hw/core/qdev.c:941:qdev_build_hotpluggable_device_list: Object 0x7f6ce04e4fe0 is not an instance of type device
> > > Aborted (core dumped)
> > > 
> > > The root cause is qdev_build_hotpluggable_device_list going recursively over
> > > all peripherals and their children assuming all are devices. It doesn't work
> > > since PCI devices have at least on child which is a memory region (bus master).
> > > 
> > > Should we try to fix it for 2.2 or simply revert it?
> > 
> > Do you think you can post a patch in the next few days? If you can then
> > let's try to fix it, otherwise we better revert those commits.
> 
> I'll try, sure.

I'm sorry that my patch causes this bug.
Thanks for your work to fix this.

Regards,
Zhu

> Thanks,
> Marcel
>