From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:58285) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V3j9p-0004Ex-D9 for qemu-devel@nongnu.org; Mon, 29 Jul 2013 04:50:30 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1V3j9h-0004fi-0u for qemu-devel@nongnu.org; Mon, 29 Jul 2013 04:50:21 -0400 Received: from mail-we0-x233.google.com ([2a00:1450:400c:c03::233]:45655) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V3j9g-0004fb-Q8 for qemu-devel@nongnu.org; Mon, 29 Jul 2013 04:50:12 -0400 Received: by mail-we0-f179.google.com with SMTP id t57so3668699wes.38 for ; Mon, 29 Jul 2013 01:50:11 -0700 (PDT) Date: Mon, 29 Jul 2013 10:50:09 +0200 From: Stefan Hajnoczi Message-ID: <20130729085008.GE26410@stefanha-thinkpad.redhat.com> References: <87zjtcw9c6.fsf@iit.kharkov.ua> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87zjtcw9c6.fsf@iit.kharkov.ua> Subject: Re: [Qemu-devel] qemu git (f03d07d46) / e100 / sending large packets causes SIGABRT List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Oleksii Shevchuk Cc: Paolo Bonzini , qemu-devel Developers On Wed, Jul 24, 2013 at 01:17:29PM +0300, Oleksii Shevchuk wrote: > > 1. qemu-kvm -sdl -nodefaults -name NP1-C1 \ > -uuid b71057e9-5705-420b-a780-52339afa6ed9 \ > -boot c \ > -hda np1UD.disk \ > -hdb fat:exchange \ > -device i82559c,netdev=vin0,romfile="",mac="00:11:22:33:44:54" \ > -netdev tap,id=vin0,ifname=vin0,script=no \ > -device cirrus-vga \ > -serial pty \ > & > > 2. ping -s 65000 > > 3. Program received signal SIGABRT, Aborted. Here is an annotated backtrace: > #7 tx_command (s=s@entry=0x7f9aac086820) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:804 > #6 pci_dma_read (len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, dev=0x7f9aac086820) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/hw/pci/pci.h:659 len=0x53f is an odd number: 1343 > #5 pci_dma_rw (dir=DMA_DIRECTION_TO_DEVICE, len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, dev=0x7f9aac086820) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/hw/pci/pci.h:652 > #4 dma_memory_rw (dir=DMA_DIRECTION_TO_DEVICE, len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, as=0x7f9aac086a40) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/sysemu/dma.h:112 > #3 0x00007f9aa96d6349 in dma_memory_rw_relaxed (dir=DMA_DIRECTION_TO_DEVICE, len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, as=0x7f9aac086a40) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/sysemu/dma.h:90 > #2 0x00007f9aa97cb9ac in address_space_rw (as=as@entry=0x7f9aac086a40, addr=0x86fa453c, addr@entry=0x86fa4000, buf=0x7f9a97ffe55e "\327\060\061\061\272?32\330\061\062\062\276@43\331\062\063\063\302A54\332\063\064\064\306B65\333\064\065\065\312C76\334\065\066\066\316D87\335\066\067\067\322E98\336\067\070\070\326F:9\337\070\071\071\332G;:\340\071::\336H<;\341:;;\342I=<\342;<<\346J>=\343<==\352K?>\344=>>", '\377' ..., buf@entry=0x7f9a97ffe022 '\377' ..., len=0x3, len@entry=0x53f, is_write=is_write@entry=0x0) at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/exec.c:2005 There are only a few bytes remaining: len=0x3. The abort(3) comes from address_space_rw(): if (!memory_access_is_direct(mr, is_write)) { /* I/O case */ l = memory_access_size(mr, l, addr1); switch (l) { case 8: ... case 4: ... case 2: ... case 1: ... default: abort(); <-- we abort here } Paolo: Do you know how the memory API is supposed to work here? Stefan