summaryrefslogtreecommitdiffstats
path: root/results/classifier/118/none/1182490
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-06-16 16:59:00 +0000
committerChristian Krinitsin <mail@krinitsin.com>2025-06-16 16:59:33 +0000
commit9aba81d8eb048db908c94a3c40c25a5fde0caee6 (patch)
treeb765e7fb5e9a3c2143c68b0414e0055adb70e785 /results/classifier/118/none/1182490
parentb89a938452613061c0f1f23e710281cf5c83cb29 (diff)
downloademulator-bug-study-9aba81d8eb048db908c94a3c40c25a5fde0caee6.tar.gz
emulator-bug-study-9aba81d8eb048db908c94a3c40c25a5fde0caee6.zip
add 18th iteration of classifier
Diffstat (limited to 'results/classifier/118/none/1182490')
-rw-r--r--results/classifier/118/none/1182490149
1 files changed, 149 insertions, 0 deletions
diff --git a/results/classifier/118/none/1182490 b/results/classifier/118/none/1182490
new file mode 100644
index 00000000..871d150e
--- /dev/null
+++ b/results/classifier/118/none/1182490
@@ -0,0 +1,149 @@
+peripherals: 0.694
+ppc: 0.667
+TCG: 0.623
+arm: 0.607
+assembly: 0.597
+permissions: 0.595
+hypervisor: 0.571
+performance: 0.559
+graphic: 0.556
+risc-v: 0.556
+architecture: 0.555
+register: 0.550
+PID: 0.539
+device: 0.527
+vnc: 0.517
+debug: 0.503
+virtual: 0.489
+mistranslation: 0.487
+semantic: 0.457
+VMM: 0.452
+KVM: 0.436
+socket: 0.416
+user-level: 0.398
+files: 0.381
+x86: 0.364
+boot: 0.345
+kernel: 0.272
+network: 0.261
+i386: 0.196
+
+[qemu-1.5] coroutine-win32.c broken on NULL pointer
+
+Program received signal SIGSEGV, Segmentation fault.
+[Switching to Thread 4340.0x163c]
+qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0, from_=0x3ba1c80)
+ at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+(gdb) bt
+#0 qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0,
+ from_=0x3ba1c80) at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+#1 coroutine_trampoline (co_=0x3ba1c80)
+ at /home/cauchy/vcs/git/qemu/coroutine-win32.c:58
+#2 0x0000000077098fed in ?? ()
+#3 0x0000000000000000 in ?? ()
+(gdb)
+(gdb) info registers
+rax 0x0 0
+rbx 0x3ba1c80 62528640
+rcx 0x0 0
+rdx 0x0 0
+rsi 0x770b28d0 1997220048
+rdi 0x3ba1b38 62528312
+rbp 0x0 0x0
+rsp 0xc0bff60 0xc0bff60
+r8 0x3184c0 3245248
+r9 0x43e31a 4449050
+r10 0x0 0
+r11 0x206 518
+r12 0x0 0
+r13 0x0 0
+r14 0x0 0
+r15 0x0 0
+rip 0x43e2cd 0x43e2cd <coroutine_trampoline+61>
+eflags 0x10206 [ PF IF RF ]
+cs 0x33 51
+ss 0x2b 43
+ds 0x0 0
+es 0x0 0
+fs 0x0 0
+gs 0x0 0
+(gdb) disassemble
+Dump of assembler code for function coroutine_trampoline:
+ 0x000000000043e290 <+0>: push %rdi
+ 0x000000000043e291 <+1>: push %rsi
+ 0x000000000043e292 <+2>: push %rbx
+ 0x000000000043e293 <+3>: sub $0x30,%rsp
+ 0x000000000043e297 <+7>: mov %rcx,%rbx
+ 0x000000000043e29a <+10>: lea 0x26dc1f(%rip),%rcx #
+0x6abec0 <__emutls_v.current>
+ 0x000000000043e2a1 <+17>: mov 0x6868dd68(%rip),%rax # 0x68acc010
+ 0x000000000043e2a8 <+24>: mov %rax,0x28(%rsp)
+ 0x000000000043e2ad <+29>: xor %eax,%eax
+ 0x000000000043e2af <+31>: callq 0x695808 <__emutls_get_address>
+ 0x000000000043e2b4 <+36>: mov 0x9090d9(%rip),%rsi #
+0xd47394 <__imp_SwitchToFiber>
+ 0x000000000043e2bb <+43>: mov %rax,%rdi
+ 0x000000000043e2be <+46>: xchg %ax,%ax
+ 0x000000000043e2c0 <+48>: mov 0x8(%rbx),%rcx
+ 0x000000000043e2c4 <+52>: callq *(%rbx)
+ 0x000000000043e2c6 <+54>: mov 0x10(%rbx),%rdx
+ 0x000000000043e2ca <+58>: mov %rdx,(%rdi)
+=> 0x000000000043e2cd <+61>: movl $0x2,0x38(%rdx)
+ 0x000000000043e2d4 <+68>: mov 0x30(%rdx),%rcx
+ 0x000000000043e2d8 <+72>: callq *%rsi
+ 0x000000000043e2da <+74>: jmp 0x43e2c0 <coroutine_trampoline+48>
+End of assembler dump.
+(gdb)
+
+
+From:
+
+qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0, from_=0x3ba1c80)
+ at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+
+We can see qemu_coroutine_switch was call with to_=NULL, then crashed at line 47:
+
+to->action = action;
+
+git bisect start
+
+git bisect bad HEAD
+git bisect good v1.4.0
+
+fde245ca7ea790495db370cd260259595dbdf874 bad NULL pointer
+a4960ef34829c355fdf25b8ee6b869c92393e366 bad ld: undefined reference
+b5a73f8d8a57e940f9bbeb399a9e47897522ee9a bad Kernel panic - not syncing: No init found
+57eb0cc85469a8948d1036ab830951e63aa32f66 good
+99e448006d9267d71c2e3a629b6e5d29ed67bb30 good
+f708e736d0dafc05f8b7e9e73d6440c930b94686 good
+962415fcd5f8223a6fbc6f7bb8c5fdf2500f2f84 good
+ce1dd5d1bbb0a3769566cb6967714c8c8c97a815 bad Kernel panic - not syncing: No init found
+c9f10124a2704b6bab21b31e79735b18d414a654 good Feb 19 23:52:08 2013
+49b4c31efcce45ab714f286f14fa5d5173f9069d bad
+e3482cb8063575f9fe0f39b701a4b6dc5a55c9cd good Feb 19 23:52:07 2013
+49b4c31efcce45ab714f286f14fa5d5173f9069d is the first bad commit
+
+On Tue, May 21, 2013 at 02:11:05PM -0000, Cauchy Song wrote:
+> Public bug reported:
+>
+> Program received signal SIGSEGV, Segmentation fault.
+> [Switching to Thread 4340.0x163c]
+> qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0, from_=0x3ba1c80)
+> at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+> (gdb) bt
+> #0 qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0,
+> from_=0x3ba1c80) at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+> #1 coroutine_trampoline (co_=0x3ba1c80)
+> at /home/cauchy/vcs/git/qemu/coroutine-win32.c:58
+> #2 0x0000000077098fed in ?? ()
+> #3 0x0000000000000000 in ?? ()
+
+What is the command-line?
+
+How do you reproduce the crash?
+
+Stefan
+
+
+[Expired for QEMU because there has been no activity for 60 days.]
+