From: Richard Henderson <richard.henderson@linaro.org>
To: Thomas Huth <thuth@redhat.com>,
QEMU Developers <qemu-devel@nongnu.org>,
qemu-arm <qemu-arm@nongnu.org>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Subject: Re: qemu-system-aarch64 crashes with device ich9-usb-ehci1
Date: Thu, 25 Mar 2021 11:12:28 -0600 [thread overview]
Message-ID: <e6588c95-0df9-2a86-af4d-0ef128eb05de@linaro.org> (raw)
In-Reply-To: <2542a79a-c143-1db4-de97-6b04929158db@redhat.com>
On 3/25/21 10:58 AM, Thomas Huth wrote:
>
> In case anybody is interested, ich9-usb-ehci1 can be used to crash QEMU:
>
> $ ./qemu-system-aarch64 -M virt -device ich9-usb-ehci1,help
> qemu-system-aarch64: ../../devel/qemu/softmmu/physmem.c:1154: phys_section_add:
> Assertion `map->sections_nb < TARGET_PAGE_SIZE' failed.
> Aborted (core dumped)
That's because
#14 0x0000555555afad47 in usb_ehci_init (s=0x555556ee54b0, dev=0x555556ee4bb0)
at ../qemu/hw/usb/hcd-ehci.c:2585
is doing stuff at init time that should be done at realize.
The virt board has not yet set the system page size, which is currently at 0.
r~
prev parent reply other threads:[~2021-03-25 17:16 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-03-25 16:58 qemu-system-aarch64 crashes with device ich9-usb-ehci1 Thomas Huth
2021-03-25 17:12 ` Richard Henderson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=e6588c95-0df9-2a86-af4d-0ef128eb05de@linaro.org \
--to=richard.henderson@linaro.org \
--cc=kraxel@redhat.com \
--cc=qemu-arm@nongnu.org \
--cc=qemu-devel@nongnu.org \
--cc=thuth@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).