summary refs log tree commit diff stats
path: root/results/classifier/003/semantic/gitlab_semantic_bextr
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-06-03 12:04:13 +0000
committerChristian Krinitsin <mail@krinitsin.com>2025-06-03 12:04:13 +0000
commit256709d2eb3fd80d768a99964be5caa61effa2a0 (patch)
tree05b2352fba70923126836a64b6a0de43902e976a /results/classifier/003/semantic/gitlab_semantic_bextr
parent2ab14fa96a6c5484b5e4ba8337551bb8dcc79cc5 (diff)
downloadqemu-analysis-256709d2eb3fd80d768a99964be5caa61effa2a0.tar.gz
qemu-analysis-256709d2eb3fd80d768a99964be5caa61effa2a0.zip
add new classifier result
Diffstat (limited to 'results/classifier/003/semantic/gitlab_semantic_bextr')
-rw-r--r--results/classifier/003/semantic/gitlab_semantic_bextr33
1 files changed, 33 insertions, 0 deletions
diff --git a/results/classifier/003/semantic/gitlab_semantic_bextr b/results/classifier/003/semantic/gitlab_semantic_bextr
new file mode 100644
index 000000000..ba7f4513f
--- /dev/null
+++ b/results/classifier/003/semantic/gitlab_semantic_bextr
@@ -0,0 +1,33 @@
+semantic: 0.993
+instruction: 0.944
+boot: 0.516
+mistranslation: 0.337
+network: 0.219
+other: 0.099
+KVM: 0.091
+
+x86 BEXTR semantic bug
+Description of problem
+The result of instruction BEXTR is different with from the CPU. The value of destination register is different. I think QEMU does not consider the operand size limit.
+
+Steps to reproduce
+
+Compile this code
+
+void main() {
+    asm("mov rax, 0x17b3693f77fb6e9");
+    asm("mov rbx, 0x8f635a775ad3b9b4");
+    asm("mov rcx, 0xb717b75da9983018");
+    asm("bextr eax, ebx, ecx");
+}
+
+Execute and compare the result with the CPU.
+
+CPU
+RAX = 0x5a
+
+QEMU
+RAX = 0x635a775a
+
+Additional information
+This bug is discovered by research conducted by KAIST SoftSec.