From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.9 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5D043C10F03 for ; Tue, 23 Apr 2019 23:05:45 +0000 (UTC) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 2D076206BA for ; Tue, 23 Apr 2019 23:05:45 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 2D076206BA Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=bugs.launchpad.net Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Received: from localhost ([127.0.0.1]:60818 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hJ4Tw-0006nH-EV for qemu-devel@archiver.kernel.org; Tue, 23 Apr 2019 19:05:44 -0400 Received: from eggs.gnu.org ([209.51.188.92]:60784) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hJ4Pq-0003xA-PK for qemu-devel@nongnu.org; Tue, 23 Apr 2019 19:01:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hJ4Po-0007Xi-Jq for qemu-devel@nongnu.org; Tue, 23 Apr 2019 19:01:30 -0400 Received: from indium.canonical.com ([91.189.90.7]:51502) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hJ4Po-0007Lu-9F for qemu-devel@nongnu.org; Tue, 23 Apr 2019 19:01:28 -0400 Received: from loganberry.canonical.com ([91.189.90.37]) by indium.canonical.com with esmtp (Exim 4.86_2 #2 (Debian)) id 1hJ4Pc-0008AE-40 for ; Tue, 23 Apr 2019 23:01:16 +0000 Received: from loganberry.canonical.com (localhost [127.0.0.1]) by loganberry.canonical.com (Postfix) with ESMTP id F0B1F2E80D7 for ; Tue, 23 Apr 2019 23:01:15 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Date: Tue, 23 Apr 2019 22:50:30 -0000 From: =?utf-8?q?Philippe_Mathieu-Daud=C3=A9?= <1804678@bugs.launchpad.net> To: qemu-devel@nongnu.org X-Launchpad-Notification-Type: bug X-Launchpad-Bug: product=qemu; status=Confirmed; importance=Undecided; assignee=None; X-Launchpad-Bug-Tags: mips X-Launchpad-Bug-Information-Type: Public X-Launchpad-Bug-Private: no X-Launchpad-Bug-Security-Vulnerability: no X-Launchpad-Bug-Commenters: aortega X-Launchpad-Bug-Reporter: Alberto Ortega (aortega) X-Launchpad-Bug-Modifier: =?utf-8?q?Philippe_Mathieu-Daud=C3=A9_=28philmd?= =?utf-8?q?=29?= References: <154290401870.17569.13384923487355075536.malonedeb@chaenomeles.canonical.com> Message-Id: <155605983209.7008.10017664640038839721.launchpad@chaenomeles.canonical.com> X-Launchpad-Message-Rationale: Subscriber (QEMU) @qemu-devel-ml X-Launchpad-Message-For: qemu-devel-ml Precedence: bulk X-Generated-By: Launchpad (canonical.com); Revision="18928"; Instance="launchpad-lazr.conf" X-Launchpad-Hash: f2dfac78fde8f76974924133792a141725a9453d X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 91.189.90.7 Subject: [Qemu-devel] [Bug 1804678] Re: qemu-3.1.0-rc0: mips emulation hangs when executing invalid instructions X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.21 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Bug 1804678 <1804678@bugs.launchpad.net> Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: "Qemu-devel" Message-ID: <20190423225030.n0Fsyl8gEHKJcSmqtU9IRP2K_f20XmIGSwoA5hmEN5o@z> ** Changed in: qemu Status: New =3D> Confirmed -- = You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1804678 Title: qemu-3.1.0-rc0: mips emulation hangs when executing invalid instructions Status in QEMU: Confirmed Bug description: QEMU version: ------------- qemu-3.1.0-rc0 compiled from sources (earlier versions also affected) Summary: -------- QEMU MIPS system emulation hangs when trying to execute the following invalid instructions: 71c5a9bf sdbbp 0x716a6 2c4745aa sltiu a3, v0, 0x45aa f47539fb sdc1 f21, 0x39fb(v1) 5fa5e284 invalid qemu-system-mips falls under an infinite loop condition and it needs to be ended. The issue has been reproduced in Ubuntu x64 host running Debian MIPS 32-bits guest with the following command line: qemu-system-mips -M malta -kernel vmlinux-3.2.0-4-4kc-malta -hda debian_wheezy_mips_standard.qcow2 -append "root=3D/dev/sda1 console=3Dtty0" It can also be reproduced using mips-linux-user, in which case throws the following exception: qemu-mips mips_loop_static.elf qemu: unhandled CPU exception 0x10 - aborting pc=3D0x004a9da0 HI=3D0x00000003 LO=3D0x00000002 ds 00e2 004a9da0 0 GPR00: r0 00000000 at fffffff8 v0 004a9da0 v1 004ad000 GPR04: a0 00000001 a1 7fffefc4 a2 7fffefcc a3 00000000 GPR08: t0 004ab854 t1 0ffffffe t2 81010100 t3 2f2f2f2f GPR12: t4 7ffff1ad t5 004ab090 t6 004ab06c t7 004ab07c GPR16: s0 00000000 s1 452ac505 s2 00400db4 s3 00400d38 GPR20: s4 00000000 s5 00000000 s6 00000000 s7 00000000 GPR24: t8 004ab0a8 t9 004a9da0 k0 00000000 k1 00000000 GPR28: gp 004b25a0 sp 7fffeec0 s8 7fffeec0 ra 0040041c CP0 Status 0x24000010 Cause 0x00000000 EPC 0x00000000 Config0 0x80008482 Config1 0x9e190c8f LLAddr 0xffffffffffffffff Config2 0x80000000 Config3 0x00000000 Config4 0x00000000 Config5 0x00000000 qemu:handle_cpu_signal received signal outside vCPU context @ pc=3D0x602d= bad8 Testcase: --------- C program to reproduce the problem: unsigned char code[] =3D "\x71\xC5\xA9\xBF\x2C\x47\x45\xAA\xF4\x75\x39\xF= B\x5F\xA5\xE2\x84"; main() { int (*ret)() =3D (int(*)())code; ret(); } Also, find a statically compiled ELF attached. To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1804678/+subscriptions