xen-devel.lists.xenproject.org archive mirror
 help / color / mirror / Atom feed
* [xen-4.5-testing test] 103161: regressions - FAIL
@ 2016-12-12  7:58 ` osstest service owner
  2016-12-12 11:47   ` Ian Jackson
  0 siblings, 1 reply; 8+ messages in thread
From: osstest service owner @ 2016-12-12  7:58 UTC (permalink / raw)
  To: xen-devel, osstest-admin

flight 103161 xen-4.5-testing real [real]
http://logs.test-lab.xenproject.org/osstest/logs/103161/

Regressions :-(

Tests which did not succeed and are blocking,
including tests which could not be run:
 test-xtf-amd64-amd64-2       52 leak-check/check         fail REGR. vs. 102721
 test-xtf-amd64-amd64-4       52 leak-check/check         fail REGR. vs. 102721
 test-xtf-amd64-amd64-3       52 leak-check/check         fail REGR. vs. 102721
 test-xtf-amd64-amd64-5       52 leak-check/check         fail REGR. vs. 102721
 test-xtf-amd64-amd64-1       52 leak-check/check         fail REGR. vs. 102721

Tests which are failing intermittently (not blocking):
 test-armhf-armhf-xl-multivcpu  5 xen-install     fail in 103051 pass in 103161
 test-armhf-armhf-xl-credit2  16 guest-start.2    fail in 103051 pass in 103161
 test-amd64-amd64-amd64-pvgrub 10 guest-start               fail pass in 103051
 test-amd64-i386-libvirt      11 guest-start                fail pass in 103051
 test-amd64-i386-xl-qemuu-ovmf-amd64  9 debian-hvm-install  fail pass in 103051
 test-amd64-i386-pair         20 guest-start/debian         fail pass in 103051
 test-amd64-amd64-pygrub      10 guest-start                fail pass in 103051
 test-amd64-i386-migrupgrade  20 guest-start/debian         fail pass in 103051
 test-amd64-i386-qemuu-rhel6hvm-amd 11 guest-start/redhat.repeat fail pass in 103051
 test-amd64-i386-freebsd10-amd64 19 guest-start.2           fail pass in 103051
 test-amd64-i386-qemut-rhel6hvm-amd 11 guest-start/redhat.repeat fail pass in 103051
 test-amd64-i386-qemut-rhel6hvm-intel 11 guest-start/redhat.repeat fail pass in 103051
 test-amd64-amd64-qemuu-nested-intel 16 debian-hvm-install/l1/l2 fail pass in 103051
 test-amd64-i386-xl-raw       18 guest-start/debian.repeat  fail pass in 103051
 test-amd64-i386-rumprun-i386 16 rumprun-demo-xenstorels/xenstorels.repeat fail pass in 103051
 test-amd64-amd64-xl-qemuu-winxpsp3 15 guest-localmigrate/x10 fail pass in 103051

Regressions which are regarded as allowable (not blocking):
 test-amd64-i386-xl-qemuu-win7-amd64 16 guest-stop       fail blocked in 102721
 test-amd64-i386-xl-qemuu-win7-amd64 13 guest-localmigrate fail in 103051 like 102721
 test-amd64-i386-xl-qemuu-winxpsp3-vcpus1 15 guest-localmigrate/x10 fail in 103051 like 102721
 test-amd64-amd64-xl-rtds      6 xen-boot                     fail  like 102721
 test-armhf-armhf-libvirt     13 saverestore-support-check    fail  like 102721
 test-amd64-amd64-xl-qemuu-win7-amd64 16 guest-stop            fail like 102721
 test-amd64-i386-xl-qemut-win7-amd64 16 guest-stop             fail like 102721
 test-amd64-amd64-xl-qemut-win7-amd64 16 guest-stop            fail like 102721
 test-armhf-armhf-xl-rtds     11 guest-start                  fail  like 102721

Tests which did not succeed, but are not blocking:
 test-amd64-i386-libvirt     12 migrate-support-check fail in 103051 never pass
 test-xtf-amd64-amd64-2       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-4       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-2     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-4     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-4     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-4       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-2     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-2       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-amd64-amd64-xl-pvh-intel 11 guest-start                  fail  never pass
 test-xtf-amd64-amd64-5       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-1       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-2       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-xtf-amd64-amd64-4       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-amd64-amd64-xl-pvh-amd  11 guest-start                  fail   never pass
 test-armhf-armhf-xl-arndale  12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-arndale  13 saverestore-support-check    fail   never pass
 test-xtf-amd64-amd64-5     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-5     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-1     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-5       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-amd64-amd64-libvirt-vhd 11 migrate-support-check        fail   never pass
 test-xtf-amd64-amd64-1     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-1       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-amd64-amd64-libvirt     12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-multivcpu 12 migrate-support-check        fail  never pass
 test-armhf-armhf-xl-multivcpu 13 saverestore-support-check    fail  never pass
 test-amd64-amd64-qemuu-nested-amd 16 debian-hvm-install/l1/l2  fail never pass
 test-xtf-amd64-amd64-3       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-xtf-amd64-amd64-5       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-armhf-armhf-xl-vhd      10 guest-start                  fail   never pass
 test-xtf-amd64-amd64-1       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-armhf-armhf-xl          12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl          13 saverestore-support-check    fail   never pass
 test-armhf-armhf-xl-cubietruck 12 migrate-support-check        fail never pass
 test-armhf-armhf-xl-cubietruck 13 saverestore-support-check    fail never pass
 test-armhf-armhf-libvirt     12 migrate-support-check        fail   never pass
 test-armhf-armhf-libvirt-raw 10 guest-start                  fail   never pass
 test-armhf-armhf-xl-credit2  12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-credit2  13 saverestore-support-check    fail   never pass
 test-armhf-armhf-libvirt-qcow2 10 guest-start                  fail never pass

version targeted for testing:
 xen                  27be856265352c259c597ff696766a1668cf7564
baseline version:
 xen                  cc325c0bd56d5cc327f8a426d661cc1a2f3a52bd

Last test of basis   102721  2016-11-29 22:49:05 Z   12 days
Failing since        102767  2016-12-01 22:47:44 Z   10 days    9 attempts
Testing same since   103051  2016-12-07 23:19:17 Z    4 days    3 attempts

------------------------------------------------------------
People who touched revisions under test:
  Ian Jackson <ian.jackson@eu.citrix.com>
  Julien Grall <julien.grall@arm.com>
  Shanker Donthineni <shankerd@codeaurora.org>

jobs:
 build-amd64-xtf                                              pass    
 build-amd64                                                  pass    
 build-armhf                                                  pass    
 build-i386                                                   pass    
 build-amd64-libvirt                                          pass    
 build-armhf-libvirt                                          pass    
 build-i386-libvirt                                           pass    
 build-amd64-prev                                             pass    
 build-i386-prev                                              pass    
 build-amd64-pvops                                            pass    
 build-armhf-pvops                                            pass    
 build-i386-pvops                                             pass    
 build-amd64-rumprun                                          pass    
 build-i386-rumprun                                           pass    
 test-xtf-amd64-amd64-1                                       fail    
 test-xtf-amd64-amd64-2                                       fail    
 test-xtf-amd64-amd64-3                                       fail    
 test-xtf-amd64-amd64-4                                       fail    
 test-xtf-amd64-amd64-5                                       fail    
 test-amd64-amd64-xl                                          pass    
 test-armhf-armhf-xl                                          pass    
 test-amd64-i386-xl                                           pass    
 test-amd64-amd64-qemuu-nested-amd                            fail    
 test-amd64-amd64-xl-pvh-amd                                  fail    
 test-amd64-i386-qemut-rhel6hvm-amd                           fail    
 test-amd64-i386-qemuu-rhel6hvm-amd                           fail    
 test-amd64-amd64-xl-qemut-debianhvm-amd64                    pass    
 test-amd64-i386-xl-qemut-debianhvm-amd64                     pass    
 test-amd64-amd64-xl-qemuu-debianhvm-amd64                    pass    
 test-amd64-i386-xl-qemuu-debianhvm-amd64                     pass    
 test-amd64-i386-freebsd10-amd64                              fail    
 test-amd64-amd64-xl-qemuu-ovmf-amd64                         pass    
 test-amd64-i386-xl-qemuu-ovmf-amd64                          fail    
 test-amd64-amd64-rumprun-amd64                               pass    
 test-amd64-amd64-xl-qemut-win7-amd64                         fail    
 test-amd64-i386-xl-qemut-win7-amd64                          fail    
 test-amd64-amd64-xl-qemuu-win7-amd64                         fail    
 test-amd64-i386-xl-qemuu-win7-amd64                          fail    
 test-armhf-armhf-xl-arndale                                  pass    
 test-amd64-amd64-xl-credit2                                  pass    
 test-armhf-armhf-xl-credit2                                  pass    
 test-armhf-armhf-xl-cubietruck                               pass    
 test-amd64-i386-freebsd10-i386                               pass    
 test-amd64-i386-rumprun-i386                                 fail    
 test-amd64-amd64-qemuu-nested-intel                          fail    
 test-amd64-amd64-xl-pvh-intel                                fail    
 test-amd64-i386-qemut-rhel6hvm-intel                         fail    
 test-amd64-i386-qemuu-rhel6hvm-intel                         pass    
 test-amd64-amd64-libvirt                                     pass    
 test-armhf-armhf-libvirt                                     pass    
 test-amd64-i386-libvirt                                      fail    
 test-amd64-amd64-migrupgrade                                 pass    
 test-amd64-i386-migrupgrade                                  fail    
 test-amd64-amd64-xl-multivcpu                                pass    
 test-armhf-armhf-xl-multivcpu                                pass    
 test-amd64-amd64-pair                                        pass    
 test-amd64-i386-pair                                         fail    
 test-amd64-amd64-libvirt-pair                                pass    
 test-amd64-i386-libvirt-pair                                 pass    
 test-amd64-amd64-amd64-pvgrub                                fail    
 test-amd64-amd64-i386-pvgrub                                 pass    
 test-amd64-amd64-pygrub                                      fail    
 test-armhf-armhf-libvirt-qcow2                               fail    
 test-amd64-amd64-xl-qcow2                                    pass    
 test-armhf-armhf-libvirt-raw                                 fail    
 test-amd64-i386-xl-raw                                       fail    
 test-amd64-amd64-xl-rtds                                     fail    
 test-armhf-armhf-xl-rtds                                     fail    
 test-amd64-i386-xl-qemut-winxpsp3-vcpus1                     pass    
 test-amd64-i386-xl-qemuu-winxpsp3-vcpus1                     pass    
 test-amd64-amd64-libvirt-vhd                                 pass    
 test-armhf-armhf-xl-vhd                                      fail    
 test-amd64-amd64-xl-qemut-winxpsp3                           pass    
 test-amd64-i386-xl-qemut-winxpsp3                            pass    
 test-amd64-amd64-xl-qemuu-winxpsp3                           fail    
 test-amd64-i386-xl-qemuu-winxpsp3                            pass    


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary


Not pushing.

------------------------------------------------------------
commit 27be856265352c259c597ff696766a1668cf7564
Author: Ian Jackson <ian.jackson@eu.citrix.com>
Date:   Wed Dec 7 16:54:35 2016 +0000

    QEMU_TAG update

commit bdf3ef18a3f5d7f2e6b198838f6e77f237d3e3f2
Author: Shanker Donthineni <shankerd@codeaurora.org>
Date:   Thu Mar 17 13:46:58 2016 +0100

    arm64: fix incorrect memory region size in TCR_EL2
    
    The maximum and minimum values for TxSZ depend on level of
    translation as per AArch64 Virtual Memory System Architecture.
    According to ARM specification DDI0487A_h (sec D4.2.2, page 1752),
    the minimum TxSZ value is 16. If TxSZ is programmed to a value
    smaller than 16 then it is IMPLEMENTATION DEFINED.
    
    This patch sets T0SZ to (64-48)bits since XEN uses all 4 levels
    to cover 48bit (256TB) virtual address instead of value zero.
    
    Signed-off-by: Shanker Donthineni <shankerd@codeaurora.org>
    Acked-by: Julien Grall <julien.grall@arm.com>
(qemu changes not included)

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL
  2016-12-12  7:58 ` [xen-4.5-testing test] 103161: " osstest service owner
@ 2016-12-12 11:47   ` Ian Jackson
  2016-12-12 13:35     ` Andrew Cooper
  0 siblings, 1 reply; 8+ messages in thread
From: Ian Jackson @ 2016-12-12 11:47 UTC (permalink / raw)
  To: xen-devel; +Cc: Andrew Cooper

Rosstest service owner writes ("[xen-4.5-testing test] 103161: regressions - FAIL"):
> flight 103161 xen-4.5-testing real [real]
> http://logs.test-lab.xenproject.org/osstest/logs/103161/
> 
> Regressions :-(
> 
> Tests which did not succeed and are blocking,
> including tests which could not be run:
>  test-xtf-amd64-amd64-2       52 leak-check/check     fail REGR. vs. 102721
>  test-xtf-amd64-amd64-4       52 leak-check/check     fail REGR. vs. 102721
>  test-xtf-amd64-amd64-3       52 leak-check/check     fail REGR. vs. 102721
>  test-xtf-amd64-amd64-5       52 leak-check/check     fail REGR. vs. 102721
>  test-xtf-amd64-amd64-1       52 leak-check/check     fail REGR. vs. 102721

AIUI this is a known and accepted regression in Xen 4.5: some of the
strange things done by one of the XTF tests causes a guest crash
(after a security updates was applied), and XTF does not clean up
after itself particularly well.

Accordingly I have force pushed this:

> version targeted for testing:
>  xen                  27be856265352c259c597ff696766a1668cf7564

(I have not killed the in-progress flight so there will be one further
report looking a bit like this.)

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL
  2016-12-12 11:47   ` Ian Jackson
@ 2016-12-12 13:35     ` Andrew Cooper
  2016-12-13 18:29       ` Ian Jackson
  0 siblings, 1 reply; 8+ messages in thread
From: Andrew Cooper @ 2016-12-12 13:35 UTC (permalink / raw)
  To: Ian Jackson, xen-devel

On 12/12/16 11:47, Ian Jackson wrote:
> Rosstest service owner writes ("[xen-4.5-testing test] 103161: regressions - FAIL"):
>> flight 103161 xen-4.5-testing real [real]
>> http://logs.test-lab.xenproject.org/osstest/logs/103161/
>>
>> Regressions :-(
>>
>> Tests which did not succeed and are blocking,
>> including tests which could not be run:
>>  test-xtf-amd64-amd64-2       52 leak-check/check     fail REGR. vs. 102721
>>  test-xtf-amd64-amd64-4       52 leak-check/check     fail REGR. vs. 102721
>>  test-xtf-amd64-amd64-3       52 leak-check/check     fail REGR. vs. 102721
>>  test-xtf-amd64-amd64-5       52 leak-check/check     fail REGR. vs. 102721
>>  test-xtf-amd64-amd64-1       52 leak-check/check     fail REGR. vs. 102721
> AIUI this is a known and accepted regression in Xen 4.5: some of the
> strange things done by one of the XTF tests causes a guest crash
> (after a security updates was applied), and XTF does not clean up
> after itself particularly well.

No.  These are not the issues we discussed.  The acceptable regression
is the invlpg~shadow test case only.


These leak check failures are because the XSA-195 PoC is somehow causing
qemu to segfault.  I cant explain why, because qemu should be involved
at all, and it is especially suspicious that it is only older branches
where this happens.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL
  2016-12-12 13:35     ` Andrew Cooper
@ 2016-12-13 18:29       ` Ian Jackson
  2016-12-13 18:49         ` Ian Jackson
  2016-12-15 15:14         ` [xen-4.5-testing test] 103161: regressions - FAIL [and 1 more messages] Ian Jackson
  0 siblings, 2 replies; 8+ messages in thread
From: Ian Jackson @ 2016-12-13 18:29 UTC (permalink / raw)
  To: Andrew Cooper; +Cc: xen-devel

Andrew Cooper writes ("Re: [xen-4.5-testing test] 103161: regressions - FAIL"):
> On 12/12/16 11:47, Ian Jackson wrote:
> > AIUI this is a known and accepted regression in Xen 4.5: some of the
> > strange things done by one of the XTF tests causes a guest crash
> > (after a security updates was applied), and XTF does not clean up
> > after itself particularly well.
> 
> No.  These are not the issues we discussed.  The acceptable regression
> is the invlpg~shadow test case only.

Hrm.

> These leak check failures are because the XSA-195 PoC is somehow causing
> qemu to segfault.  I cant explain why, because qemu should be involved
> at all, and it is especially suspicious that it is only older branches
> where this happens.

As we discussed yesterday, while this may be a real bug, I think it is
not really a _regression_ in the sense that the osstest baseline
version has the same bug.

I therefore propose to do a force push of 4.4 too.

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL
  2016-12-13 18:29       ` Ian Jackson
@ 2016-12-13 18:49         ` Ian Jackson
  2016-12-13 20:03           ` Andrew Cooper
  2016-12-15 15:14         ` [xen-4.5-testing test] 103161: regressions - FAIL [and 1 more messages] Ian Jackson
  1 sibling, 1 reply; 8+ messages in thread
From: Ian Jackson @ 2016-12-13 18:49 UTC (permalink / raw)
  To: Andrew Cooper, xen-devel, Stefano Stabellini

Ian Jackson writes ("Re: [xen-4.5-testing test] 103161: regressions - FAIL"):
> As we discussed yesterday, while this may be a real bug, I think it is
> not really a _regression_ in the sense that the osstest baseline
> version has the same bug.
> 
> I therefore propose to do a force push of 4.4 too.

I dug the coredump and built binaries out of 103161 and

(gdb) bt
#0  0x00007fd84de5a20d in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007fd8519900d4 in address_space_rw ()
#2  0x00007fd8519901bd in cpu_physical_memory_rw ()
#3  0x00007fd851a6df4b in rw_phys_req_item ()
#4  0x00007fd851a6df81 in read_phys_req_item ()
#5  0x00007fd851a6e1dc in cpu_ioreq_move ()
#6  0x00007fd851a6e3b6 in handle_ioreq ()
#7  0x00007fd851a6e6d9 in cpu_handle_ioreq ()
#8  0x00007fd8518e13fc in qemu_iohandler_poll ()
#9  0x00007fd8518e238a in main_loop_wait ()
#10 0x00007fd851973aa1 in main_loop ()
#11 0x00007fd85197b049 in main ()
(gdb)

And the kernel said:

qemu-system-i38[3905]: segfault at 0 ip 00007fd84de5a20d sp
00007ffc38857878 error 4 in libc-2.19.so[7fd84ddc8000+1a1000]

The top ?? is probably because my gdb didn't find the corresponding
correct libc.so.  Looking at the source for address_space_rw I wonder
if it is trying to use one of the `memcpy' calls on the
`memory_access_is_direct' branches, which would be a serious mistake.

Sadly there is no debug information.  qemu seems to have crashed
without producing any output of any knd.

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL
  2016-12-13 18:49         ` Ian Jackson
@ 2016-12-13 20:03           ` Andrew Cooper
  0 siblings, 0 replies; 8+ messages in thread
From: Andrew Cooper @ 2016-12-13 20:03 UTC (permalink / raw)
  To: Ian Jackson, xen-devel, Stefano Stabellini

On 13/12/16 18:49, Ian Jackson wrote:
> Ian Jackson writes ("Re: [xen-4.5-testing test] 103161: regressions - FAIL"):
>> As we discussed yesterday, while this may be a real bug, I think it is
>> not really a _regression_ in the sense that the osstest baseline
>> version has the same bug.
>>
>> I therefore propose to do a force push of 4.4 too.
> I dug the coredump and built binaries out of 103161 and
>
> (gdb) bt
> #0  0x00007fd84de5a20d in ?? () from /lib/x86_64-linux-gnu/libc.so.6
> #1  0x00007fd8519900d4 in address_space_rw ()
> #2  0x00007fd8519901bd in cpu_physical_memory_rw ()
> #3  0x00007fd851a6df4b in rw_phys_req_item ()
> #4  0x00007fd851a6df81 in read_phys_req_item ()
> #5  0x00007fd851a6e1dc in cpu_ioreq_move ()
> #6  0x00007fd851a6e3b6 in handle_ioreq ()
> #7  0x00007fd851a6e6d9 in cpu_handle_ioreq ()
> #8  0x00007fd8518e13fc in qemu_iohandler_poll ()
> #9  0x00007fd8518e238a in main_loop_wait ()
> #10 0x00007fd851973aa1 in main_loop ()
> #11 0x00007fd85197b049 in main ()
> (gdb)
>
> And the kernel said:
>
> qemu-system-i38[3905]: segfault at 0 ip 00007fd84de5a20d sp
> 00007ffc38857878 error 4 in libc-2.19.so[7fd84ddc8000+1a1000]
>
> The top ?? is probably because my gdb didn't find the corresponding
> correct libc.so.  Looking at the source for address_space_rw I wonder
> if it is trying to use one of the `memcpy' calls on the
> `memory_access_is_direct' branches, which would be a serious mistake.
>
> Sadly there is no debug information.  qemu seems to have crashed
> without producing any output of any knd.

The XSA-195 PoC is very short.

http://xenbits.xen.org/gitweb/?p=xtf.git;a=blob;f=tests/xsa-195/main.c;h=5cc2c18d82ab8d350cd07784d82680d4d0c7e72b;hb=HEAD

It constructs itself a memory hole with decrease_reservation of gfn 0,
then points a specially-crafted `bt` instruction to see whether Xen
crashes during emulation.

With Xen fixed, the emulation code in the hypervisor will come to the
conclusion that this is MMIO which should be sent to qemu.  Xen will
therefore ask Qemu what value should be found at guest physical address
0xff8.  I wonder if the fact that this is gfn 0 is causing Qemu to do
something wrong...

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* [xen-4.4-testing test] 103240: regressions - FAIL
@ 2016-12-14  4:47 osstest service owner
  2016-12-12  7:58 ` [xen-4.5-testing test] 103161: " osstest service owner
  0 siblings, 1 reply; 8+ messages in thread
From: osstest service owner @ 2016-12-14  4:47 UTC (permalink / raw)
  To: xen-devel, osstest-admin

flight 103240 xen-4.4-testing real [real]
http://logs.test-lab.xenproject.org/osstest/logs/103240/

Regressions :-(

Tests which did not succeed and are blocking,
including tests which could not be run:
 test-xtf-amd64-amd64-3   20 xtf/test-hvm32-invlpg~shadow fail REGR. vs. 102521
 test-xtf-amd64-amd64-4       52 leak-check/check         fail REGR. vs. 102521
 test-xtf-amd64-amd64-3 31 xtf/test-hvm32pae-invlpg~shadow fail REGR. vs. 102521
 test-xtf-amd64-amd64-5       52 leak-check/check         fail REGR. vs. 102521
 test-xtf-amd64-amd64-3   42 xtf/test-hvm64-invlpg~shadow fail REGR. vs. 102521
 test-xtf-amd64-amd64-1       52 leak-check/check         fail REGR. vs. 102521
 test-xtf-amd64-amd64-3       52 leak-check/check         fail REGR. vs. 102521
 test-xtf-amd64-amd64-2       52 leak-check/check         fail REGR. vs. 102521
 test-armhf-armhf-xl-multivcpu 15 guest-start/debian.repeat fail REGR. vs. 102521

Tests which are failing intermittently (not blocking):
 test-armhf-armhf-xl-multivcpu  6 xen-boot        fail in 103166 pass in 103240
 test-armhf-armhf-xl-credit2 15 guest-start/debian.repeat fail in 103166 pass in 103240
 test-amd64-i386-xl-raw 18 guest-start/debian.repeat fail in 103166 pass in 103240
 test-amd64-amd64-xl-qemuu-winxpsp3 13 guest-localmigrate fail in 103166 pass in 103240
 test-amd64-i386-xend-qemut-winxpsp3 9 windows-install fail in 103166 pass in 103240
 test-armhf-armhf-xl-arndale  15 guest-start/debian.repeat  fail pass in 103166

Regressions which are regarded as allowable (not blocking):
 test-amd64-i386-xl-qemuu-win7-amd64 16 guest-stop   fail in 103166 like 102521
 test-xtf-amd64-amd64-4       16 xtf/test-pv32pae-selftest    fail  like 102521
 test-xtf-amd64-amd64-2       16 xtf/test-pv32pae-selftest    fail  like 102521
 test-amd64-amd64-xl-qemuu-win7-amd64 16 guest-stop            fail like 102521
 test-amd64-amd64-xl-qemut-win7-amd64 16 guest-stop            fail like 102521
 test-amd64-i386-xl-qemut-win7-amd64 16 guest-stop             fail like 102521

Tests which did not succeed, but are not blocking:
 test-amd64-amd64-rumprun-amd64  1 build-check(1)               blocked  n/a
 test-amd64-i386-rumprun-i386  1 build-check(1)               blocked  n/a
 test-xtf-amd64-amd64-1       10 xtf-fep                      fail   never pass
 build-amd64-rumprun           7 xen-build                    fail   never pass
 test-xtf-amd64-amd64-1       16 xtf/test-pv32pae-selftest    fail   never pass
 test-xtf-amd64-amd64-1       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-4       10 xtf-fep                      fail   never pass
 test-xtf-amd64-amd64-1     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-4       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-1     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 build-i386-rumprun            7 xen-build                    fail   never pass
 test-xtf-amd64-amd64-4     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-5       10 xtf-fep                      fail   never pass
 test-xtf-amd64-amd64-1       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-amd64-amd64-libvirt     12 migrate-support-check        fail   never pass
 test-xtf-amd64-amd64-4     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-4       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-armhf-armhf-libvirt-qcow2  9 debian-di-install            fail never pass
 test-xtf-amd64-amd64-3       10 xtf-fep                      fail   never pass
 test-amd64-amd64-libvirt-vhd 11 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-arndale  12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-arndale  13 saverestore-support-check    fail   never pass
 test-xtf-amd64-amd64-4       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-armhf-armhf-libvirt-raw  9 debian-di-install            fail   never pass
 test-xtf-amd64-amd64-5       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-amd64-amd64-qemuu-nested-intel 16 debian-hvm-install/l1/l2 fail never pass
 test-xtf-amd64-amd64-1       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-xtf-amd64-amd64-2       10 xtf-fep                      fail   never pass
 test-amd64-amd64-qemuu-nested-amd 16 debian-hvm-install/l1/l2  fail never pass
 test-xtf-amd64-amd64-2       18 xtf/test-hvm32-cpuid-faulting fail  never pass
 test-xtf-amd64-amd64-2     29 xtf/test-hvm32pae-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-2     35 xtf/test-hvm32pse-cpuid-faulting fail never pass
 test-xtf-amd64-amd64-2       39 xtf/test-hvm64-cpuid-faulting fail  never pass
 test-armhf-armhf-xl-credit2  12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-credit2  13 saverestore-support-check    fail   never pass
 test-amd64-i386-libvirt      12 migrate-support-check        fail   never pass
 test-xtf-amd64-amd64-3       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-xtf-amd64-amd64-2       51 xtf/test-hvm64-xsa-195       fail   never pass
 test-armhf-armhf-xl-cubietruck 12 migrate-support-check        fail never pass
 test-armhf-armhf-xl          12 migrate-support-check        fail   never pass
 test-armhf-armhf-xl-cubietruck 13 saverestore-support-check    fail never pass
 test-armhf-armhf-xl-vhd       9 debian-di-install            fail   never pass
 test-armhf-armhf-xl          13 saverestore-support-check    fail   never pass
 test-armhf-armhf-xl-multivcpu 12 migrate-support-check        fail  never pass
 test-armhf-armhf-xl-multivcpu 13 saverestore-support-check    fail  never pass
 test-amd64-i386-xend-qemut-winxpsp3 20 leak-check/check        fail never pass
 test-armhf-armhf-libvirt     11 guest-start                  fail   never pass

version targeted for testing:
 xen                  149c34a6ea0c6821620554059e85cb89acf0ff8f
baseline version:
 xen                  6639a202f285ace4adf57453ade066bd4b4298e0

Last test of basis   102521  2016-11-22 13:45:20 Z   21 days
Failing since        102718  2016-11-29 19:17:21 Z   14 days   13 attempts
Testing same since   103058  2016-12-08 01:54:44 Z    6 days    4 attempts

------------------------------------------------------------
People who touched revisions under test:
  Ian Jackson <Ian.Jackson@eu.citrix.com>
  Jan Beulich <jbeulich@suse.com>

jobs:
 build-amd64-xend                                             pass    
 build-i386-xend                                              pass    
 build-amd64-xtf                                              pass    
 build-amd64                                                  pass    
 build-armhf                                                  pass    
 build-i386                                                   pass    
 build-amd64-libvirt                                          pass    
 build-armhf-libvirt                                          pass    
 build-i386-libvirt                                           pass    
 build-amd64-pvops                                            pass    
 build-armhf-pvops                                            pass    
 build-i386-pvops                                             pass    
 build-amd64-rumprun                                          fail    
 build-i386-rumprun                                           fail    
 test-xtf-amd64-amd64-1                                       fail    
 test-xtf-amd64-amd64-2                                       fail    
 test-xtf-amd64-amd64-3                                       fail    
 test-xtf-amd64-amd64-4                                       fail    
 test-xtf-amd64-amd64-5                                       fail    
 test-amd64-amd64-xl                                          pass    
 test-armhf-armhf-xl                                          pass    
 test-amd64-i386-xl                                           pass    
 test-amd64-amd64-qemuu-nested-amd                            fail    
 test-amd64-i386-qemut-rhel6hvm-amd                           pass    
 test-amd64-i386-qemuu-rhel6hvm-amd                           pass    
 test-amd64-amd64-xl-qemut-debianhvm-amd64                    pass    
 test-amd64-i386-xl-qemut-debianhvm-amd64                     pass    
 test-amd64-amd64-xl-qemuu-debianhvm-amd64                    pass    
 test-amd64-i386-xl-qemuu-debianhvm-amd64                     pass    
 test-amd64-i386-freebsd10-amd64                              pass    
 test-amd64-amd64-xl-qemuu-ovmf-amd64                         pass    
 test-amd64-i386-xl-qemuu-ovmf-amd64                          pass    
 test-amd64-amd64-rumprun-amd64                               blocked 
 test-amd64-amd64-xl-qemut-win7-amd64                         fail    
 test-amd64-i386-xl-qemut-win7-amd64                          fail    
 test-amd64-amd64-xl-qemuu-win7-amd64                         fail    
 test-amd64-i386-xl-qemuu-win7-amd64                          pass    
 test-armhf-armhf-xl-arndale                                  fail    
 test-amd64-amd64-xl-credit2                                  pass    
 test-armhf-armhf-xl-credit2                                  pass    
 test-armhf-armhf-xl-cubietruck                               pass    
 test-amd64-i386-freebsd10-i386                               pass    
 test-amd64-i386-rumprun-i386                                 blocked 
 test-amd64-amd64-qemuu-nested-intel                          fail    
 test-amd64-i386-qemut-rhel6hvm-intel                         pass    
 test-amd64-i386-qemuu-rhel6hvm-intel                         pass    
 test-amd64-amd64-libvirt                                     pass    
 test-armhf-armhf-libvirt                                     fail    
 test-amd64-i386-libvirt                                      pass    
 test-amd64-amd64-xl-multivcpu                                pass    
 test-armhf-armhf-xl-multivcpu                                fail    
 test-amd64-amd64-pair                                        pass    
 test-amd64-i386-pair                                         pass    
 test-amd64-amd64-libvirt-pair                                pass    
 test-amd64-i386-libvirt-pair                                 pass    
 test-amd64-amd64-pv                                          pass    
 test-amd64-i386-pv                                           pass    
 test-amd64-amd64-amd64-pvgrub                                pass    
 test-amd64-amd64-i386-pvgrub                                 pass    
 test-amd64-amd64-pygrub                                      pass    
 test-armhf-armhf-libvirt-qcow2                               fail    
 test-amd64-amd64-xl-qcow2                                    pass    
 test-armhf-armhf-libvirt-raw                                 fail    
 test-amd64-i386-xl-raw                                       pass    
 test-amd64-i386-xl-qemut-winxpsp3-vcpus1                     pass    
 test-amd64-i386-xl-qemuu-winxpsp3-vcpus1                     pass    
 test-amd64-amd64-libvirt-vhd                                 pass    
 test-armhf-armhf-xl-vhd                                      fail    
 test-amd64-i386-xend-qemut-winxpsp3                          fail    
 test-amd64-amd64-xl-qemut-winxpsp3                           pass    
 test-amd64-amd64-xl-qemuu-winxpsp3                           pass    


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary


Not pushing.

------------------------------------------------------------
commit 149c34a6ea0c6821620554059e85cb89acf0ff8f
Author: Ian Jackson <ian.jackson@eu.citrix.com>
Date:   Wed Dec 7 16:54:47 2016 +0000

    QEMU_TAG update

commit 1c1bfc1cf252f76b69664a7a6446d205da28f382
Author: Ian Jackson <ian.jackson@eu.citrix.com>
Date:   Tue Nov 29 18:40:26 2016 +0000

    QEMU_TAG update
========================================
commit eb200a6a9aca6ea6c03bea986d4b64c090672ed1
Author: Ian Jackson <ian.jackson@eu.citrix.com>
Date:   Mon Nov 14 17:19:46 2016 +0000

    qemu: ioport_read, ioport_write: be defensive about 32-bit addresses
    
    On x86, ioport addresses are 16-bit.  That these functions take 32-bit
    arguments is a mistake.  Changing the argument type to 16-bit will
    discard the top bits of any erroneous values from elsewhere in qemu.
    
    Also, check just before use that the value is in range.  (This turns
    an ill-advised change to MAX_IOPORTS into a possible guest crash
    rather than a privilege escalation vulnerability.)
    
    And, in the Xen ioreq processor, clamp incoming ioport addresses to
    16-bit values.  Xen will never write >16-bit values but the guest may
    have access to the ioreq ring.  We want to defend the rest of the qemu
    code from wrong values.
    
    This is XSA-199.
    
    Reported-by: yanghongke <yanghongke@huawei.com>
    Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
    (cherry picked from commit b669e922b37b8957248798a5eb7aa96a666cd3fe)
    (cherry picked from commit 095261a9ad5c31b9ed431f8382e8aa223089c85b)
    (cherry picked from commit 18858e28bb6bae83ddcf413995b2e68c4c7ae03d)
    (cherry picked from commit a7fd3717d99944530b04130f050e83402e64afed)
    (cherry picked from commit 3af411fbe776a5436f695e70c9420ea736d03ca8)

commit 851b5ee8ae2a841373d605ae6f755cb33a3626f9
Author: Jan Beulich <jbeulich@suse.com>
Date:   Tue Nov 29 18:38:24 2016 +0000

    xen: fix ioreq handling
    
    Avoid double fetches and bounds check size to avoid overflowing
    internal variables.
    
    This is XSA-197.
    
    Reported-by: yanghongke <yanghongke@huawei.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Ian Jackson <ian.jackson@eu.citrix.com>
    (cherry picked from commit fadd27b1a7d6f5cfc4786ef09d60b368e44226ad)

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [xen-4.5-testing test] 103161: regressions - FAIL [and 1 more messages]
  2016-12-13 18:29       ` Ian Jackson
  2016-12-13 18:49         ` Ian Jackson
@ 2016-12-15 15:14         ` Ian Jackson
  1 sibling, 0 replies; 8+ messages in thread
From: Ian Jackson @ 2016-12-15 15:14 UTC (permalink / raw)
  To: Andrew Cooper, xen-devel

Ian Jackson writes ("Re: [xen-4.5-testing test] 103161: regressions - FAIL"):
> Andrew Cooper writes ("Re: [xen-4.5-testing test] 103161: regressions - FAIL"):
> > These leak check failures are because the XSA-195 PoC is somehow causing
> > qemu to segfault.  I cant explain why, because qemu should be involved
> > at all, and it is especially suspicious that it is only older branches
> > where this happens.
> 
> As we discussed yesterday, while this may be a real bug, I think it is
> not really a _regression_ in the sense that the osstest baseline
> version has the same bug.
> 
> I therefore propose to do a force push of 4.4 too.

I have now done this.  I force pushed this version:

osstest service owner writes ("[xen-4.4-testing test] 103240: regressions - FAIL"):
> flight 103240 xen-4.4-testing real [real]
> http://logs.test-lab.xenproject.org/osstest/logs/103240/
> 
> Regressions :-(
> 
> Tests which did not succeed and are blocking,
> including tests which could not be run:
>  test-xtf-amd64-amd64-3 20 xtf/test-hvm32-invlpg~shadow fail REGR. vs. 102521
>  test-xtf-amd64-amd64-3 42 xtf/test-hvm64-invlpg~shadow fail REGR. vs. 102521
>  test-xtf-amd64-amd64-3 31 xtf/test-hvm32pae-invlpg~shadow fail REGR. vs. 102521

These are expected.

>  test-xtf-amd64-amd64-4       52 leak-check/check     fail REGR. vs. 102521
>  test-xtf-amd64-amd64-5       52 leak-check/check     fail REGR. vs. 102521
>  test-xtf-amd64-amd64-1       52 leak-check/check     fail REGR. vs. 102521
>  test-xtf-amd64-amd64-3       52 leak-check/check     fail REGR. vs. 102521
>  test-xtf-amd64-amd64-2       52 leak-check/check     fail REGR. vs. 102521

This is the known qemu crash, see above.

>  test-armhf-armhf-xl-multivcpu 15 guest-start/debian.repeat fail REGR. vs. 102521

This test seems to be slightly unreliable.  It would be nice to know
why but in any case it's not a regression on the Xen 4.4 branch.

> version targeted for testing:
>  xen                  149c34a6ea0c6821620554059e85cb89acf0ff8f

So pushed this.

Later flights have more failures in, which is why I picked this one.

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, other threads:[~2016-12-15 15:14 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-12-14  4:47 [xen-4.4-testing test] 103240: regressions - FAIL osstest service owner
2016-12-12  7:58 ` [xen-4.5-testing test] 103161: " osstest service owner
2016-12-12 11:47   ` Ian Jackson
2016-12-12 13:35     ` Andrew Cooper
2016-12-13 18:29       ` Ian Jackson
2016-12-13 18:49         ` Ian Jackson
2016-12-13 20:03           ` Andrew Cooper
2016-12-15 15:14         ` [xen-4.5-testing test] 103161: regressions - FAIL [and 1 more messages] Ian Jackson

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).