Throws a PF when it should throw a GF/SS Description of problem: QEMU misreports what should be a #GP as a #PF ``` check_exception old: 0xffffffff new 0xe 0: v=0e e=0001 i=0 cpl=0 IP=0028:ffffffffb28fa53b pc=ffffffffb28fa53b SP=0030:ffffffffb2901210 CR2=1fbf7020000772a4 RAX=1fbf7020000772a4 RBX=0000000000000000 RCX=ffff80000006a0a8 RDX=ffff80000006a038 RSI=1fbff0200000d26c RDI=0000000000000080 RBP=ffffffffb2901230 RSP=ffffffffb2901210 R8 =ffffffffb28fb37f R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffffb28fa53b RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] CS =0028 0000000000000000 00000000 00209a00 DPL=0 CS64 [-R-] SS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] DS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] FS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] GS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] LDT=0000 0000000000000000 00000000 00008200 DPL=0 LDT TR =0000 0000000000000000 0000ffff 00008b00 DPL=0 TSS64-busy GDT= 000000000000edc0 00000037 IDT= 000000000002e6a0 000000ff CR0=80000013 CR2=1fbf7020000772a4 CR3=0000000000058000 CR4=000006a0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 CCS=3f7fe0400001a4d9 CCD=1fbff0200000d26c CCO=SARQ EFER=0000000000000501 ``` Now, `CR2=1fbf7020000772a4` is of course a non-canonical address, and therefore should not generate a #PF, rather it should generate a #GP. I also tried to generate a #SS by dereferencing a non-canonical address through the stack, and that also throws a #PF instead of a #SS ``` check_exception old: 0xffffffff new 0xe 0: v=0e e=0001 i=0 cpl=0 IP=0028:fffffffff4bda92a pc=fffffffff4bda92a SP=0030:1fbf7020000772a4 CR2=1fbf70200007729c RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=fffffffff4bdb998 RSI=0000000000000000 RDI=fffffffff4bdb998 RBP=fffffffff4bdf290 RSP=1fbf7020000772a4 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=fffffffff4bda92a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] CS =0028 0000000000000000 00000000 00209a00 DPL=0 CS64 [-R-] SS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] DS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] FS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] GS =0030 0000000000000000 00000000 00009300 DPL=0 DS [-WA] LDT=0000 0000000000000000 00000000 00008200 DPL=0 LDT TR =0000 0000000000000000 0000ffff 00008b00 DPL=0 TSS64-busy GDT= 000000000000edc0 00000037 IDT= 000000000002e6a0 000000ff CR0=80000011 CR2=1fbf70200007729c CR3=00000000bffa5000 CR4=00000020 ``` Steps to reproduce: 1. Dereference a non-canonical address 2. QEMU gives you a page fault instead of a gpf 3. reconsider life