diff options
Diffstat (limited to 'gitlab/issues/target_i386/host_missing/accel_TCG/676.toml')
| -rw-r--r-- | gitlab/issues/target_i386/host_missing/accel_TCG/676.toml | 64 |
1 files changed, 0 insertions, 64 deletions
diff --git a/gitlab/issues/target_i386/host_missing/accel_TCG/676.toml b/gitlab/issues/target_i386/host_missing/accel_TCG/676.toml deleted file mode 100644 index 7858697ff..000000000 --- a/gitlab/issues/target_i386/host_missing/accel_TCG/676.toml +++ /dev/null @@ -1,64 +0,0 @@ -id = 676 -title = "Throws a PF when it should throw a GF/SS" -state = "closed" -created_at = "2021-10-18T01:57:53.193Z" -closed_at = "2021-11-08T17:49:13.308Z" -labels = ["Regression", "accel: TCG", "kind::Bug", "target: i386", "workflow::In Progress"] -url = "https://gitlab.com/qemu-project/qemu/-/issues/676" -host-os = "Arch Linux" -host-arch = "x86" -qemu-version = "QEMU emulator version 6.1.0" -guest-os = "Custom" -guest-arch = "x86" -description = """QEMU misreports what should be a #GP as a #PF -``` -check_exception old: 0xffffffff new 0xe - 0: v=0e e=0001 i=0 cpl=0 IP=0028:ffffffffb28fa53b pc=ffffffffb28fa53b SP=0030:ffffffffb2901210 CR2=1fbf7020000772a4 -RAX=1fbf7020000772a4 RBX=0000000000000000 RCX=ffff80000006a0a8 RDX=ffff80000006a038 -RSI=1fbff0200000d26c RDI=0000000000000080 RBP=ffffffffb2901230 RSP=ffffffffb2901210 -R8 =ffffffffb28fb37f R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 -R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 -RIP=ffffffffb28fa53b RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 -ES =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -CS =0028 0000000000000000 00000000 00209a00 DPL=0 CS64 [-R-] -SS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -DS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -FS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -GS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -LDT=0000 0000000000000000 00000000 00008200 DPL=0 LDT -TR =0000 0000000000000000 0000ffff 00008b00 DPL=0 TSS64-busy -GDT= 000000000000edc0 00000037 -IDT= 000000000002e6a0 000000ff -CR0=80000013 CR2=1fbf7020000772a4 CR3=0000000000058000 CR4=000006a0 -DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 -DR6=00000000ffff0ff0 DR7=0000000000000400 -CCS=3f7fe0400001a4d9 CCD=1fbff0200000d26c CCO=SARQ -EFER=0000000000000501 -``` - -Now, `CR2=1fbf7020000772a4` is of course a non-canonical address, and therefore should not generate a #PF, rather it should generate a #GP. I also tried to generate a #SS by dereferencing a non-canonical address through the stack, and that also throws a #PF instead of a #SS - -``` -check_exception old: 0xffffffff new 0xe - 0: v=0e e=0001 i=0 cpl=0 IP=0028:fffffffff4bda92a pc=fffffffff4bda92a SP=0030:1fbf7020000772a4 CR2=1fbf70200007729c -RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=fffffffff4bdb998 -RSI=0000000000000000 RDI=fffffffff4bdb998 RBP=fffffffff4bdf290 RSP=1fbf7020000772a4 -R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 -R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 -RIP=fffffffff4bda92a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 -ES =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -CS =0028 0000000000000000 00000000 00209a00 DPL=0 CS64 [-R-] -SS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -DS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -FS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -GS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] -LDT=0000 0000000000000000 00000000 00008200 DPL=0 LDT -TR =0000 0000000000000000 0000ffff 00008b00 DPL=0 TSS64-busy -GDT= 000000000000edc0 00000037 -IDT= 000000000002e6a0 000000ff -CR0=80000011 CR2=1fbf70200007729c CR3=00000000bffa5000 CR4=00000020 -```""" -reproduce = """1. Dereference a non-canonical address -2. QEMU gives you a page fault instead of a gpf -3. reconsider life""" -additional = "n/a" |