diff options
| author | Christian Krinitsin <mail@krinitsin.com> | 2025-06-26 11:32:28 +0200 |
|---|---|---|
| committer | Christian Krinitsin <mail@krinitsin.com> | 2025-06-26 11:32:36 +0200 |
| commit | adedf8771bc4de3113041ca21bd4d0d1c0014b6a (patch) | |
| tree | 1e8e456a6e4247061767e0d42740a62102ae1550 /results/classifier/semantic-bugs-usermode/test/1373 | |
| parent | ba2789bd7d81618a42dc7f69706a7acfa591630a (diff) | |
| download | qemu-analysis-adedf8771bc4de3113041ca21bd4d0d1c0014b6a.tar.gz qemu-analysis-adedf8771bc4de3113041ca21bd4d0d1c0014b6a.zip | |
filter for semantic-user-mode bugs
Diffstat (limited to 'results/classifier/semantic-bugs-usermode/test/1373')
| -rw-r--r-- | results/classifier/semantic-bugs-usermode/test/1373 | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/results/classifier/semantic-bugs-usermode/test/1373 b/results/classifier/semantic-bugs-usermode/test/1373 new file mode 100644 index 000000000..d4cf2ba67 --- /dev/null +++ b/results/classifier/semantic-bugs-usermode/test/1373 @@ -0,0 +1,33 @@ +semantic: 0.996 +assembly: 0.951 +instruction: 0.948 +graphic: 0.898 +device: 0.784 +vnc: 0.746 +mistranslation: 0.642 +boot: 0.505 +socket: 0.502 +network: 0.373 +other: 0.248 +KVM: 0.113 + +x86 ADOX and ADCX semantic bug +Description of problem: +The result of instruction ADOX and ADCX are different from the CPU. The value of one of EFLAGS is different. +Steps to reproduce: +1. Compile this code +``` +void main() { + asm("push 512; popfq;"); + asm("mov rax, 0xffffffff84fdbf24"); + asm("mov rbx, 0xb197d26043bec15d"); + asm("adox eax, ebx"); +} +``` +2. Execute and compare the result with the CPU. This problem happens with ADCX, too (with CF). + - CPU + - OF = 0 + - QEMU + - OF = 1 +Additional information: +This bug is discovered by research conducted by KAIST SoftSec. |