diff options
| author | Christian Krinitsin <mail@krinitsin.com> | 2025-05-21 21:21:26 +0200 |
|---|---|---|
| committer | Christian Krinitsin <mail@krinitsin.com> | 2025-05-21 21:21:26 +0200 |
| commit | 4b927bc37359dec23f67d3427fc982945f24f404 (patch) | |
| tree | 245449ef9146942dc7fffd0235b48b7e70a00bf2 /gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml | |
| parent | aa8bd79cec7bf6790ddb01d156c2ef2201abbaab (diff) | |
| download | qemu-analysis-4b927bc37359dec23f67d3427fc982945f24f404.tar.gz qemu-analysis-4b927bc37359dec23f67d3427fc982945f24f404.zip | |
add gitlab issues in toml format
Diffstat (limited to 'gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml')
| -rw-r--r-- | gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml b/gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml new file mode 100644 index 000000000..c72ad8494 --- /dev/null +++ b/gitlab/issues/target_i386/host_missing/accel_TCG/1377.toml @@ -0,0 +1,22 @@ +id = 1377 +title = "x86 CVT* series instructions fault" +state = "closed" +created_at = "2022-12-16T08:22:41.339Z" +closed_at = "2023-10-02T09:21:23.485Z" +labels = ["accel: TCG", "target: i386", "workflow::Patch available"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1377" +host-os = "Windows 10 20H2" +host-arch = "x86" +qemu-version = "7.1.90 (v7.2.0-rc0)" +guest-os = "None" +guest-arch = "x86" +description = """For example, CVTSD2SS instruction converts SRC[63:0] double precision floating point to DEST[31:0] single precision floating point. Although the CVTSD2SS instruction uses only 8 bytes, if it overlaps page boundary, I think QEMU tries to access over the valid memory and crashes.""" +reproduce = """1. Compile this code +``` +void main() { + mmap(0x555555559000, 0x1000, flag, ~~, 0); + asm("cvtsd2ss xmm1, qword ptr [0x555555559ff8]"); +} +``` +2. Execute. QEMU crashes but CPU does not.""" +additional = """This bug is discovered by research conducted by KAIST SoftSec.""" |