From: Richard Henderson <1912065@bugs.launchpad.net>
To: qemu-devel@nongnu.org
Subject: [Bug 1912065] Re: Segfaults in tcg/optimize.c:212 after commit 7c79721606be11b5bc556449e5bcbc331ef6867d
Date: Sun, 24 Jan 2021 02:29:39 -0000 [thread overview]
Message-ID: <161145537939.13231.11965409922619269466.malone@chaenomeles.canonical.com> (raw)
In-Reply-To: 161081817733.30007.5357056175605529567.malonedeb@chaenomeles.canonical.com
A full solution to the problem:
https://patchew.org/QEMU/20210123230105.2076270-1-richard.henderson@linaro.org/
--
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1912065
Title:
Segfaults in tcg/optimize.c:212 after commit
7c79721606be11b5bc556449e5bcbc331ef6867d
Status in QEMU:
In Progress
Bug description:
QEMU segfaults to NULL dereference in tcg/optimize.c:212 semi-randomly
after commit 7c79721606be11b5bc556449e5bcbc331ef6867d
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000020
Exception Note: EXC_CORPSE_NOTIFY
...
Thread 4 Crashed:
0 qemu-system-ppc 0x0000000109cd26d2 tcg_opt_gen_mov + 178 (optimize.c:212)
1 qemu-system-ppc 0x0000000109ccf838 tcg_optimize + 5656
2 qemu-system-ppc 0x0000000109c27600 tcg_gen_code + 64 (tcg.c:4490)
3 qemu-system-ppc 0x0000000109c17b6d tb_gen_code + 493 (translate-all.c:1952)
4 qemu-system-ppc 0x0000000109c16085 tb_find + 41 (cpu-exec.c:454) [inlined]
5 qemu-system-ppc 0x0000000109c16085 cpu_exec + 2117 (cpu-exec.c:810)
6 qemu-system-ppc 0x0000000109c09ac3 tcg_cpus_exec + 35 (tcg-cpus.c:57)
7 qemu-system-ppc 0x0000000109c75edd rr_cpu_thread_fn + 445 (tcg-cpus-rr.c:217)
8 qemu-system-ppc 0x0000000109e41fae qemu_thread_start + 126 (qemu-thread-posix.c:521)
9 libsystem_pthread.dylib 0x00007fff2038e950 _pthread_start + 224
10 libsystem_pthread.dylib 0x00007fff2038a47b thread_start + 15
Here the crash is in tcg/optimize.c line 212:
mask = si->mask;
"si" is NULL. The NULL value arises from tcg/optimize.c line 198:
si = ts_info(src_ts);
I did not attempt to determine the root cause of this issue, however.
It clearly is related to the "tcg/optimize" changes in this commit.
The previous commit c0dd6654f207810b16a75b673258f5ce2ceffbf0 doesn't
crash.
To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1912065/+subscriptions
next prev parent reply other threads:[~2021-01-24 2:36 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-01-16 17:29 [Bug 1912065] [NEW] Segfaults in tcg/optimize.c:212 after commit 7c79721606be11b5bc556449e5bcbc331ef6867d Harry Sintonen
2021-01-16 19:57 ` BALATON Zoltan
2021-01-16 19:57 ` BALATON Zoltan
2021-01-17 20:52 ` [Bug 1912065] " Richard Henderson
2021-01-18 17:27 ` Richard Henderson
2021-01-18 18:00 ` no-reply
2021-01-18 19:05 ` Richard Henderson
2021-01-23 22:29 ` Roman Bolshakov
2021-01-24 2:29 ` Richard Henderson [this message]
2021-01-25 18:31 ` Richard Henderson
2021-04-30 8:53 ` Thomas Huth
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=161145537939.13231.11965409922619269466.malone@chaenomeles.canonical.com \
--to=1912065@bugs.launchpad.net \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).