[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [Bug 1711316] Re: fbsd strip(1) segfaults on aarch64
From: |
Gergely Czuczy |
Subject: |
[Qemu-devel] [Bug 1711316] Re: fbsd strip(1) segfaults on aarch64 |
Date: |
Fri, 25 Aug 2017 20:41:37 -0000 |
*** This bug is a duplicate of bug 1713066 ***
https://bugs.launchpad.net/bugs/1713066
** This bug has been marked a duplicate of bug 1713066
Incorrect handling of aarch64 ldp in some cases
--
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1711316
Title:
fbsd strip(1) segfaults on aarch64
Status in QEMU:
New
Bug description:
Hello,
During port builds ld.lld(devel/boost-libs, www/node), and strip
(textproc/libxml2 on xmlcatalog) are segfaulting. On physical boxes
these things do work, as they should:
address@hidden:~ # strip xmlcatalog
Segmentation fault (core dumped)
All the cores fail at the same assembly instruction, here's strip's backtrace:
# lldb -c strip.core strip
(lldb) target create "strip" --core "strip.core"
Core file '/root/strip.core' (aarch64) was loaded.
(lldb) t 1
* thread #1, name = 'strip', stop reason = signal SIGSEGV
frame #0: 0x0000000040312f40 libc.so.7`memcpy + 192
libc.so.7`memcpy:
-> 0x40312f40 <+192>: ldp x4, x3, [x4, #-0x10]
0x40312f44 <+196>: stp x6, x7, [x0]
0x40312f48 <+200>: stp x8, x9, [x0, #0x10]
0x40312f4c <+204>: stp x10, x11, [x0, #0x20]
(lldb) bt
* thread #1, name = 'strip', stop reason = signal SIGSEGV
* frame #0: 0x0000000040312f40 libc.so.7`memcpy + 192
frame #1: 0x000000004017ac70
libelf.so.2`_libelf_cvt_HALF_tom(dst=<unavailable>, dsz=<unavailable>,
src=<unavailable>, count=<unavailable>, byteswap=<unavailable>) at
libelf_convert.c:794
frame #2: 0x0000000040177b34
libelf.so.2`elf_getdata(s=0x0000000040f355a0, ed=<unavailable>) at
elf_data.c:155
frame #3: 0x00000000000283d4 strip`copy_data(s=0x0000000040f36a40) at
sections.c:1176
frame #4: 0x0000000000027ea4 strip`copy_content(ecp=<unavailable>) at
sections.c:594
frame #5: 0x0000000000023ff4 strip`create_elf(ecp=0x0000000040ed6000) at
main.c:381
frame #6: 0x000000000002558c strip`create_file(ecp=<unavailable>,
src=<unavailable>, dst=<unavailable>) at main.c:705
frame #7: 0x0000000000024e20 strip`main [inlined]
strip_main(argc=<unavailable>, argv=<unavailable>) at main.c:1192
frame #8: 0x0000000000024cc8 strip`main(argc=<unavailable>,
argv=<unavailable>) at main.c:1590
frame #9: 0x0000000000020190 strip`__start + 376
frame #10: 0x0000000040050018 ld-elf.so.1`.rtld_start at rtld_start.S:41
Host system information:
# uname -a
FreeBSD marvin.harmless.hu 11.0-STABLE FreeBSD 11.0-STABLE #0 r311927: Wed
Jan 11 14:53:55 CET 2017 address@hidden:/usr/obj/usr/src/sys/MARVIN amd64
# qemu-system-aarch64 --version
QEMU emulator version 2.9.0
Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers
# pkg info | grep qemu
qemu-2.9.0 QEMU CPU Emulator
I also had this happening with 2.8.0 and 2.8.1
Guest information:
# uname -a
FreeBSD build-aarch64.marvin.harmless.hu 12.0-CURRENT FreeBSD 12.0-CURRENT #0
r322578: Wed Aug 16 18:08:43 CEST 2017
address@hidden:/tank/rpi3/obj/arm64.aarch64/tank/rpi3/src/sys/GENERIC-NODEBUG
arm64
Startup:
zdev=/dev/zvol/tank/rpi3/qemu-image
qemu-system-aarch64 -m 4096M -cpu cortex-a57 -M virt \
-accel tcg,thread=single \
-bios QEMU_EFI.fd -serial telnet::4444,server -nographic \
-drive if=none,file=${image},id=hd0,format=raw \
-device virtio-blk-device,drive=hd0 \
-device e1000,netdev=net0 \
-netdev
tap,id=net0,ifname=tap0,script=/tank/rpi3/build/qemu-ifup.sh
Tested with cortex A53 as well, does the same.
I've attached a test image to reproduce with (340MB), if it's too big for an
attachment, it can be downloaded from here:
http://czg.harmless.hu/qemu-bug-stripsigsegv/image.gz
Reproduction steps:
1) log in as root, no password
2) strip xmlcatalog, it will segfault
For a full reproduction with ld.lld as well, you need a ports tree, it's
suggested to attach a bigger volume to /usr/ports over NFS first (it might need
more space than the image has). Steps for it:
1) portsnap fetch extract
2) make -C /usr/ports/devel/boost-libs package-recursive
3) make -C /usr/ports/textproc/libxml2 package-recursive
4) make -C /usr/ports/www/node package-recursive
Boost and node can take a day or more in a qemu VM. The build-time
options I've be set already, /var/db/ports is populated, so you
shouldn't have questions asked during the builds.
I've saved the core dumps, those can be found at /root/cores/ in the
image.
I hope I've submitted all the required information. If anything else
is needed, please let me know.
Best regards,
Gergely
To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1711316/+subscriptions