[Qemu-devel] [Bug 1218098] Re: qemu-system-ppc64 segfaults in helper_ldl_mmu

["T. Huth" <1218098@bugs.launchpad.net>]

** Changed in: qemu
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1218098

Title:
  qemu-system-ppc64 segfaults in helper_ldl_mmu

Status in QEMU:
  Fix Released

Bug description:
  Download a Fedora 19 ISO from:
  http://mirrors.kernel.org/fedora-secondary/releases/19/Fedora/ppc64/iso/

  Compile qemu from git (I'm using 401c227b0a1134245ec61c6c5a9997cfc963c8e4
  from today).

  Run qemu-system-ppc64 like this:

  ppc64-softmmu/qemu-system-ppc64 -M pseries -m 4096 -hda
  /dev/fedora/f20ppc64 -cdrom /tmp/Fedora-19-ppc64-DVD.iso -netdev
  user,id=usernet,net=169.254.0.0/16 -device virtio-net-
  pci,netdev=usernet

  Guest gets to yaboot.  If you hit return, qemu segfaults:

  Program received signal SIGABRT, Aborted.
  0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6)
      at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
  56	  return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig);
  (gdb) t a a bt

  Thread 4 (Thread 0x7fff6eef7700 (LWP 7553)):
  #0  sem_timedwait ()
      at ../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:101
  #1  0x00005555559a5897 in qemu_sem_timedwait (sem=sem@entry=0x55555631e788,
      ms=ms@entry=10000) at util/qemu-thread-posix.c:238
  #2  0x000055555577e54c in worker_thread (opaque=0x55555631e6f0)
      at thread-pool.c:97
  #3  0x00007ffff625ec53 in start_thread (arg=0x7fff6eef7700)
      at pthread_create.c:308
  #4  0x00007ffff04df13d in clone ()
      at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

  Thread 3 (Thread 0x7fff6e605700 (LWP 7547)):
  #0  0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6)
      at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
  #1  0x00007ffff0421128 in __GI_abort () at abort.c:90
  #2  0x000055555583ea33 in helper_ldl_mmu (env=0x7ffff7fd7140, addr=1572864,
      mmu_idx=1) at /home/rjones/d/qemu/include/exec/softmmu_template.h:153
  #3  0x00007fffab0819d8 in code_gen_buffer ()
  #4  0x00005555557aa7ae in cpu_tb_exec (tb_ptr=<optimized out>,
      cpu=0x7ffff7fd7010) at /home/rjones/d/qemu/cpu-exec.c:56
  #5  cpu_ppc_exec (env=env@entry=0x7ffff7fd7140)
      at /home/rjones/d/qemu/cpu-exec.c:631
  #6  0x00005555557abc35 in tcg_cpu_exec (env=0x7ffff7fd7140)
      at /home/rjones/d/qemu/cpus.c:1193
  #7  tcg_exec_all () at /home/rjones/d/qemu/cpus.c:1226
  #8  qemu_tcg_cpu_thread_fn (arg=<optimized out>)
      at /home/rjones/d/qemu/cpus.c:885
  #9  0x00007ffff625ec53 in start_thread (arg=0x7fff6e605700)
      at pthread_create.c:308
  #10 0x00007ffff04df13d in clone ()
      at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

  Thread 1 (Thread 0x7ffff7fa9a40 (LWP 7542)):
  #0  0x00007ffff04d4c2f in __GI_ppoll (fds=0x555556483210, nfds=4,
      timeout=<optimized out>, timeout@entry=0x7fffffffd940,
      sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:56
  #1  0x0000555555762db9 in ppoll (__ss=0x0, __timeout=0x7fffffffd940,
      __nfds=<optimized out>, __fds=<optimized out>)
      at /usr/include/bits/poll2.h:77
  #2  qemu_poll_ns (fds=<optimized out>, nfds=<optimized out>,
      timeout=timeout@entry=951497) at qemu-timer.c:276
  #3  0x000055555572b58c in os_host_main_loop_wait (timeout=951497)
      at main-loop.c:228
  #4  main_loop_wait (nonblocking=<optimized out>) at main-loop.c:484
  #5  0x00005555555ef9d8 in main_loop () at vl.c:2090
  #6  main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>)
      at vl.c:4435

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1218098/+subscriptions