[Qemu-devel] emulated lance device crashes in debian-sparc32

[Mark Glines <mark@glines.org>]

Hi,

I've been trying to get Debian installed on a virtual sparc box,
running on a x86 Linux host.  I get a reproducible crash early in the
installation process, when the sparc kernel tries to load the lance
driver.

I have configured qemu with:

./configure --prefix=/usr --enable-slirp --enable-adlib
--disable-linux-user --enable-system --enable-sdl --enable-kqemu
--disable-alsa

The sparc32 CD image I am booting from is:

http://cdimage.debian.org/debian-cd/4.0_r0/sparc/iso-cd/debian-40r0-sparc-netinst.iso

The command line I am using is:

qemu-system-sparc -no-reboot -hda ~/qemu-debian-sparc.hda -net user
-cdrom ~/debian-40r0-sparc-netinst.iso -boot d

To reproduce, just run the above commandline and hit enter a few times.
(The -hda image is empty, and probably not necessary for reproduction.)

Hit enter at the SILO boot-prompt, hit enter to accept the default
language (English), default country (United States), default keymap
(American English).

Crash occurs on the detecting network hardware screen.  I've verified
this crash occurs in the 0.9.0 release, and in a fresh cvs checkout.
(In other words, the recent openbios-sparc32 checkin did not affect
this issue.)

Crash details:

Program received signal SIGSEGV, Segmentation fault.
pcnet_h_reset (opaque=0x0)
at /home/paranoid/workspace/qemu/hw/pcnet.c:1565
1565        memcpy(s->prom, s->nd->macaddr, 6);
(gdb) print s
$1 = (PCNetState *) 0x0
(gdb) bt
#0  pcnet_h_reset (opaque=0x0) at /home/paranoid/workspace/qemu/hw/pcnet.c:1565
#1  0x0808ca20 in dma_mem_writel (opaque=0x9b5d460, addr=2017460240, val=128)
    at /home/paranoid/workspace/qemu/hw/sparc32_dma.c:199
#2  0x080ad29c in __stl_mmu (addr=4244701200, val=128, is_user=0)
    at ../softmmu_template.h:197
#3  0x095f9a81 in code_gen_buffer ()
#4  0x00000000 in ?? ()
(gdb)

The weird thing is, when I add "-net nic,model=lance" to my command line
right before "-net user", the crash does not occur.  I kinda assumed from
the above backtrace that the lance driver was selected on sparc32 by
default...

Please let me know if there's anything else I can do to help debug this.

Mark