Re: [Qemu-devel] [PULL 00/24] block: Command line option -blockdev

[Peter Maydell <peter.maydell@linaro.org>]

On 3 March 2017 at 16:36, Peter Maydell <peter.maydell@linaro.org> wrote:
> On 3 March 2017 at 16:31, Peter Maydell <peter.maydell@linaro.org> wrote:
>> x86-64 Linux host:
>>
>> QTEST_QEMU_BINARY=cris-softmmu/qemu-system-cris
>> QTEST_QEMU_IMG=qemu-img MALLOC_PERTURB_=${MALLOC_PERTURB_:-$((RANDOM %
>> 255 + 1))} gtester -k --verbose -m=quick  tests/qmp-test
>> tests/device-introspect-test tests/qom-test
>> TEST: tests/qmp-test... (pid=31974)
>>   /cris/qmp/protocol:
>> Broken pipe
>> FAIL
>
> Failure is intermittent.

gdb'ing the qemu shows a SEGV accessing a NULL qdict:

Thread 1 "qemu-system-cri" received signal SIGSEGV, Segmentation fault.
0x00005555557e98b9 in qdict_find (bucket=<optimised out>,
    key=0x55555587fd17 "error", qdict=0x0)
    at /home/petmay01/linaro/qemu-for-merges/qobject/qdict.c:110
110         QLIST_FOREACH(entry, &qdict->table[bucket], next)
(gdb) bt
#0  0x00005555557e98b9 in qdict_get (bucket=<optimised out>,
key=0x55555587fd17 "error", qdict=0x0)
    at /home/petmay01/linaro/qemu-for-merges/qobject/qdict.c:110
#1  0x00005555557e98b9 in qdict_get (qdict=0x0,
key=key@entry=0x55555587fd17 "error")
    at /home/petmay01/linaro/qemu-for-merges/qobject/qdict.c:157
#2  0x00005555557e9a69 in qdict_get_qdict (qdict=<optimised out>,
key=key@entry=0x55555587fd17 "error")
    at /home/petmay01/linaro/qemu-for-merges/qobject/qdict.c:242
#3  0x000055555561c1f8 in handle_qmp_command (parser=<optimised out>,
tokens=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/monitor.c:3727
#4  0x00005555557ebca7 in json_message_process_token
(lexer=0x55555607d148, input=0x55555606b480, type=JSON_RCURLY, x=31,
y=6)
    at /home/petmay01/linaro/qemu-for-merges/qobject/json-streamer.c:105
#5  0x00005555558086fd in json_lexer_feed_char
(lexer=lexer@entry=0x55555607d148, ch=125 '}',
flush=flush@entry=false)
    at /home/petmay01/linaro/qemu-for-merges/qobject/json-lexer.c:319
#6  0x000055555580880e in json_lexer_feed (lexer=0x55555607d148,
buffer=<optimised out>, size=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/qobject/json-lexer.c:369
#7  0x00005555557ebd69 in json_message_parser_feed (parser=<optimised
out>, buffer=<optimised out>, size=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/qobject/json-streamer.c:124
#8  0x000055555561ad8b in monitor_qmp_read (opaque=<optimised out>,
buf=<optimised out>, size=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/monitor.c:3768
#9  0x00005555557a190d in tcp_chr_read (chan=<optimised out>,
cond=<optimised out>, opaque=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/chardev/char-socket.c:411
#10 0x00007fffe144404a in g_main_context_dispatch
(context=0x55555606ba80) at
/build/glib2.0-prJhLS/glib2.0-2.48.2/./glib/gmain.c:3154
#11 0x00007fffe144404a in g_main_context_dispatch
(context=context@entry=0x55555606ba80)
    at /build/glib2.0-prJhLS/glib2.0-2.48.2/./glib/gmain.c:3769
#12 0x00005555557f167b in main_loop_wait () at
/home/petmay01/linaro/qemu-for-merges/util/main-loop.c:215
#13 0x00005555557f167b in main_loop_wait (timeout=<optimised out>) at
/home/petmay01/linaro/qemu-for-merges/util/main-loop.c:260
#14 0x00005555557f167b in main_loop_wait (nonblocking=<optimised out>)
at /home/petmay01/linaro/qemu-for-merges/util/main-loop.c:508
#15 0x00005555555d87c5 in main () at
/home/petmay01/linaro/qemu-for-merges/vl.c:1900
#16 0x00005555555d87c5 in main (argc=<optimised out>, argv=<optimised
out>, envp=<optimised out>)
    at /home/petmay01/linaro/qemu-for-merges/vl.c:4714

(In frame 3 handle_qmp_command() the rsp returned from qmp_dispatch()
is NULL.)

thanks
-- PMM