summary refs log tree commit diff stats
path: root/results/classifier/deepseek-2-tmp/output/hypervisor/1182490
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-06-30 12:34:26 +0000
committerChristian Krinitsin <mail@krinitsin.com>2025-06-30 12:35:44 +0000
commit25f8033d556aa17afaea4a5196ea7a69fe248320 (patch)
tree0f056db167683be54ea1e5e72d29d6069af55e7d /results/classifier/deepseek-2-tmp/output/hypervisor/1182490
parent8e6da29e4ee5fc14bc1cc816a24f21271f14090d (diff)
downloademulator-bug-study-25f8033d556aa17afaea4a5196ea7a69fe248320.tar.gz
emulator-bug-study-25f8033d556aa17afaea4a5196ea7a69fe248320.zip
add new temporary deepseek-r1:14b results
Diffstat (limited to 'results/classifier/deepseek-2-tmp/output/hypervisor/1182490')
-rw-r--r--results/classifier/deepseek-2-tmp/output/hypervisor/118249077
1 files changed, 77 insertions, 0 deletions
diff --git a/results/classifier/deepseek-2-tmp/output/hypervisor/1182490 b/results/classifier/deepseek-2-tmp/output/hypervisor/1182490
new file mode 100644
index 00000000..cab3da2b
--- /dev/null
+++ b/results/classifier/deepseek-2-tmp/output/hypervisor/1182490
@@ -0,0 +1,77 @@
+
+[qemu-1.5] coroutine-win32.c broken on NULL pointer
+
+Program received signal SIGSEGV, Segmentation fault.
+[Switching to Thread 4340.0x163c]
+qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0, from_=0x3ba1c80)
+    at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+(gdb) bt
+#0  qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0,
+    from_=0x3ba1c80) at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+#1  coroutine_trampoline (co_=0x3ba1c80)
+    at /home/cauchy/vcs/git/qemu/coroutine-win32.c:58
+#2  0x0000000077098fed in ?? ()
+#3  0x0000000000000000 in ?? ()
+(gdb)
+(gdb) info registers
+rax            0x0      0
+rbx            0x3ba1c80        62528640
+rcx            0x0      0
+rdx            0x0      0
+rsi            0x770b28d0       1997220048
+rdi            0x3ba1b38        62528312
+rbp            0x0      0x0
+rsp            0xc0bff60        0xc0bff60
+r8             0x3184c0 3245248
+r9             0x43e31a 4449050
+r10            0x0      0
+r11            0x206    518
+r12            0x0      0
+r13            0x0      0
+r14            0x0      0
+r15            0x0      0
+rip            0x43e2cd 0x43e2cd <coroutine_trampoline+61>
+eflags         0x10206  [ PF IF RF ]
+cs             0x33     51
+ss             0x2b     43
+ds             0x0      0
+es             0x0      0
+fs             0x0      0
+gs             0x0      0
+(gdb) disassemble
+Dump of assembler code for function coroutine_trampoline:
+   0x000000000043e290 <+0>:     push   %rdi
+   0x000000000043e291 <+1>:     push   %rsi
+   0x000000000043e292 <+2>:     push   %rbx
+   0x000000000043e293 <+3>:     sub    $0x30,%rsp
+   0x000000000043e297 <+7>:     mov    %rcx,%rbx
+   0x000000000043e29a <+10>:    lea    0x26dc1f(%rip),%rcx        #
+0x6abec0 <__emutls_v.current>
+   0x000000000043e2a1 <+17>:    mov    0x6868dd68(%rip),%rax        # 0x68acc010
+   0x000000000043e2a8 <+24>:    mov    %rax,0x28(%rsp)
+   0x000000000043e2ad <+29>:    xor    %eax,%eax
+   0x000000000043e2af <+31>:    callq  0x695808 <__emutls_get_address>
+   0x000000000043e2b4 <+36>:    mov    0x9090d9(%rip),%rsi        #
+0xd47394 <__imp_SwitchToFiber>
+   0x000000000043e2bb <+43>:    mov    %rax,%rdi
+   0x000000000043e2be <+46>:    xchg   %ax,%ax
+   0x000000000043e2c0 <+48>:    mov    0x8(%rbx),%rcx
+   0x000000000043e2c4 <+52>:    callq  *(%rbx)
+   0x000000000043e2c6 <+54>:    mov    0x10(%rbx),%rdx
+   0x000000000043e2ca <+58>:    mov    %rdx,(%rdi)
+=> 0x000000000043e2cd <+61>:    movl   $0x2,0x38(%rdx)
+   0x000000000043e2d4 <+68>:    mov    0x30(%rdx),%rcx
+   0x000000000043e2d8 <+72>:    callq  *%rsi
+   0x000000000043e2da <+74>:    jmp    0x43e2c0 <coroutine_trampoline+48>
+End of assembler dump.
+(gdb)
+
+
+From:
+
+qemu_coroutine_switch (action=COROUTINE_TERMINATE, to_=0x0, from_=0x3ba1c80)
+    at /home/cauchy/vcs/git/qemu/coroutine-win32.c:47
+
+We can see qemu_coroutine_switch was call with to_=NULL, then crashed at line 47:
+
+to->action = action;
\ No newline at end of file