summary refs log tree commit diff stats
path: root/gitlab/issues/target_missing/host_missing/accel_missing/841.toml
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-05-30 16:52:07 +0200
committerChristian Krinitsin <mail@krinitsin.com>2025-05-30 16:52:17 +0200
commit9260319e7411ff8281700a532caa436f40120ec4 (patch)
tree2f6bfe5f3458dd49d328d3a9eb508595450adec0 /gitlab/issues/target_missing/host_missing/accel_missing/841.toml
parent225caa38269323af1bfc2daadff5ec8bd930747f (diff)
downloadqemu-analysis-9260319e7411ff8281700a532caa436f40120ec4.tar.gz
qemu-analysis-9260319e7411ff8281700a532caa436f40120ec4.zip
gitlab scraper: download in toml and text format
Diffstat (limited to 'gitlab/issues/target_missing/host_missing/accel_missing/841.toml')
-rw-r--r--gitlab/issues/target_missing/host_missing/accel_missing/841.toml88
1 files changed, 0 insertions, 88 deletions
diff --git a/gitlab/issues/target_missing/host_missing/accel_missing/841.toml b/gitlab/issues/target_missing/host_missing/accel_missing/841.toml
deleted file mode 100644
index 33aacd987..000000000
--- a/gitlab/issues/target_missing/host_missing/accel_missing/841.toml
+++ /dev/null
@@ -1,88 +0,0 @@
-id = 841
-title = "SIGSEGV in memcpy in v9fs_co_readdir_many"
-state = "closed"
-created_at = "2022-01-25T23:32:08.353Z"
-closed_at = "2022-02-19T15:21:45.202Z"
-labels = ["block:9p", "kind::Bug", "workflow::Triaged"]
-url = "https://gitlab.com/qemu-project/qemu/-/issues/841"
-host-os = "ALT Linux"
-host-arch = "x86-64"
-qemu-version = "QEMU emulator version 6.2.0 (qemu-6.2.0-alt1)"
-guest-os = "ALT Linux"
-guest-arch = "x86-64"
-description = """When running btrfs tests in vm (using `virtme`-like setup with 9pfs) occasionally qemu crashes with (`coredumpctl info` output):
-```
-...
-Message: Process 1764494 (qemu-system-x86) of user 502 dumped core.
-Stack trace of thread 1764817:
- #0  0x00005555559ebeed v9fs_co_readdir_many (/usr/bin/qemu-system-x86_64 + 0x497eed)
- #1  0x00005555559ec2e9 v9fs_readdir (/usr/bin/qemu-system-x86_64 + 0x4982e9)
- #2  0x0000555555eb7983 coroutine_trampoline (/usr/bin/qemu-system-x86_64 + 0x963983)
- #3  0x00007ffff73e0be0 n/a (n/a + 0x0)
-```"""
-reproduce = "n/a"
-additional = """coredumpctl debug:
-```
-Failed to read a valid object file image from memory.
-Core was generated by `qemu-system-x86_64 -enable-kvm -m 40270M -smp cores=20 -nodefaults -nographic -'.
-Program terminated with signal SIGSEGV, Segmentation fault.
-#0  0x00005555559ebeed in memcpy (__len=<optimized out>, __src=<optimized out>, __dest=<optimized out>, __dest=<optimized out>, __src=<optimized out>,
-    __len=<optimized out>) at /usr/include/bits/string_fortified.h:29
-29        return __builtin___memcpy_chk (__dest, __src, __len,
-[Current thread is 1 (LWP 1764817)]
-(gdb) list ../hw/9pfs/codir.c:147
-142                 *entries = e = g_malloc0(sizeof(V9fsDirEnt));
-143             } else {
-144                 e = e->next = g_malloc0(sizeof(V9fsDirEnt));
-145             }
-146             e->dent = g_malloc0(sizeof(struct dirent));
-147             memcpy(e->dent, dent, sizeof(struct dirent));
-148
-149             /* perform a full stat() for directory entry if requested by caller */
-150             if (dostat) {
-151                 err = s->ops->name_to_path(
-(gdb) bt
-#0  0x00005555559ebeed in memcpy (__len=<optimized out>, __src=<optimized out>, __dest=<optimized out>, __dest=<optimized out>, __src=<optimized out>,
-    __len=<optimized out>) at /usr/include/bits/string_fortified.h:29
-#1  do_readdir_many (dostat=<optimized out>, maxsize=<optimized out>, offset=<optimized out>, entries=<optimized out>, fidp=<optimized out>,
-    pdu=0x555557353500) at ../hw/9pfs/codir.c:147
-#2  v9fs_co_readdir_many (pdu=pdu@entry=0x555557353500, fidp=fidp@entry=0x555556cdd280, entries=entries@entry=0x7ff5bf7f7f58, offset=<optimized out>,
-    maxsize=<optimized out>, dostat=<optimized out>) at ../hw/9pfs/codir.c:226
-#3  0x00005555559ec2e9 in v9fs_do_readdir (max_count=<optimized out>, offset=<optimized out>, fidp=0x555556cdd280, pdu=0x555557353500) at ../hw/9pfs/9p.c:2430
-#4  v9fs_readdir (opaque=0x555557353500) at ../hw/9pfs/9p.c:2543
-#5  0x0000555555eb7983 in coroutine_trampoline (i0=<optimized out>, i1=<optimized out>) at ../util/coroutine-ucontext.c:173
-#6  0x00007ffff73e0be0 in ?? ()
-#7  0x00007fffffffd480 in ?? ()
-#8  0x0000000000000000 in ?? ()
-(gdb) x/11i 0x00005555559ebeed - 27
-   0x5555559ebed2 <v9fs_co_readdir_many+530>:   call   0x555555928480 <g_malloc0@plt>
-   0x5555559ebed7 <v9fs_co_readdir_many+535>:   mov    %rbp,%rsi
-   0x5555559ebeda <v9fs_co_readdir_many+538>:   mov    %rax,(%r12)
-   0x5555559ebede <v9fs_co_readdir_many+542>:   mov    0x0(%rbp),%rdx
-   0x5555559ebee2 <v9fs_co_readdir_many+546>:   lea    0x8(%rax),%rdi
-   0x5555559ebee6 <v9fs_co_readdir_many+550>:   and    $0xfffffffffffffff8,%rdi
-   0x5555559ebeea <v9fs_co_readdir_many+554>:   mov    %rdx,(%rax)
-=> 0x5555559ebeed <v9fs_co_readdir_many+557>:   mov    0x110(%rbp),%rdx
-   0x5555559ebef4 <v9fs_co_readdir_many+564>:   mov    %rdx,0x110(%rax)
-   0x5555559ebefb <v9fs_co_readdir_many+571>:   sub    %rdi,%rax
-   0x5555559ebefe <v9fs_co_readdir_many+574>:   sub    %rax,%rsi
-(gdb) i r rdx rax rip
-rdx            0x29287d            2697341
-rax            0x7ff4bc12ccf0      140689104096496
-rip            0x5555559ebeed      0x5555559ebeed <v9fs_co_readdir_many+557>
-(gdb) x/11x 0x7ff4bc12ccf0
-0x7ff4bc12ccf0: 0x0029287d      0x00000000      0x00000000      0x00000000
-0x7ff4bc12cd00: 0x00000000      0x00000000      0x00000000      0x00000000
-0x7ff4bc12cd10: 0x00000000      0x00000000      0x00000000
-(gdb) frame 1
-#1  do_readdir_many (dostat=<optimized out>, maxsize=<optimized out>, offset=<optimized out>, entries=<optimized out>, fidp=<optimized out>,
-    pdu=0x555557353500) at ../hw/9pfs/codir.c:147
-147             memcpy(e->dent, dent, sizeof(struct dirent));
-(gdb) p e
-$3 = (struct V9fsDirEnt *) 0x7ff4bc12caa0
-(gdb) p e->dent
-$4 = (struct dirent *) 0x7ff4bc12ccf0
-(gdb) p dent
-$5 = (struct dirent *) 0x7ff4ec04cef0
-
-```"""