Your message dated Wed, 10 Aug 2011 11:43:23 -0500
with message-id <[email protected]>
and subject line Re: qemu-system-arm: Segmentation fault using daily build of 
Debian armel installer
has caused the Debian Bug report #626875,
regarding qemu-system-arm: Segmentation fault using daily build of Debian armel 
installer
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
626875: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626875
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: qemu-system
Version: 0.14.0+dfsg-5.1
Severity: important

Hi,

| $ qemu-img create arm-install.qemu 10G
| Formatting 'arm-install.qemu', fmt=raw size=10737418240 
| $ wget 
http://d-i.debian.org/daily-images/armel/daily/versatile/netboot/initrd.gz
| [...]
| $ wget 
http://d-i.debian.org/daily-images/armel/daily/versatile/netboot/vmlinuz-2.6.37-2-versatile
| [...]
| $ sha1sum initrd.gz vmlinuz-2.6.37-2-versatile 
| 9822cd356e2e66c0ee2d08f2dfc100f074683b81  initrd.gz
| 81aa8f15f6d0fb3fa971d859787f89eec653d1a3  vmlinuz-2.6.37-2-versatile
| $ qemu-system-arm  -M versatilepb -kernel vmlinuz-2.6.37-2-versatile \
|       -initrd initrd.gz -hda arm-install.qemu
| Segmentation fault (core dumped)

Missing in the above transcript is where I was in the installation process.

 1. choice of keymap, mirror, etc are boring
 2. it asks for a root password.  I leave it blank.
 3. it asks for a new account.  I make "sudoer".
 4. it wants a password.  I give one.
 5. clock-setup: rdate: 0.debian.pool.ntp.org: Name or service not known
    (yep, known problem with the DNS server used)
 6. I choose a time zone and switch to vt4 so I can see messages.
 7. The messages scroll too quickly for me to see.  Something about SCSI,
    among other things.  Segfault.

So I tried building 60d6e50c from the packaging repo.  Backtrace:

| (gdb) bt full
| #0  0x000000000056a2b0 in lsi_do_command (s=0x13e2b40) at 
/home/jrn/src/qemu/hw/lsi53c895a.c:762
|         dev = 0x13e5d50
|         buf = "\000\000\000\000\000\000\000\000y\356Q\000\000\000\000"
|         n = 656877154
| #1  lsi_execute_script (s=0x13e2b40) at 
/home/jrn/src/qemu/hw/lsi53c895a.c:1131
|         insn = 20864336
|         addr = 97140572
|         addr_high = <value optimized out>
|         opcode = <value optimized out>
|         insn_processed = 18
| #2  0x000000000056b794 in lsi_reg_writeb (s=0x13e2b40, offset=<value 
optimized out>, val=32 ' ')
|     at /home/jrn/src/qemu/hw/lsi53c895a.c:1720
| No locals.
| #3  0x00000000419006ee in ?? ()
| No symbol table info available.
| #4  0x0000000000000040 in ?? ()
| No symbol table info available.
| #5  0x0000000000000000 in ?? ()
| No symbol table info available.

lsi53c895a.c:762 is "dev->info->read_data(dev, s->current->tag);".

| (gdb) p *dev->info
| $2 = {qdev = {name = 0x600e62 "scsi-disk", fw_name = 0x600e67 "disk", alias = 
0x0, 
|     desc = 0x600e6c "virtual scsi disk or cdrom", size = 248, props = 
0x8fe0c0, no_user = 0, 
|     reset = 0x46f3d0 <scsi_disk_reset>, vmsd = 0x0, init = 0x471e30 
<scsi_qdev_init>, 
|     unplug = 0x497450 <qdev_simple_unplug_cb>, exit = 0x471f30 
<scsi_qdev_exit>, bus_info = 0x8fe420, 
|     next = 0x8fd9c0}, init = 0x46f130 <scsi_disk_initfn>, destroy = 0x46f450 
<scsi_destroy>, 
|   send_command = 0x470480 <scsi_send_command>, read_data = 0x46f0a0 
<scsi_read_data>, 
|   write_data = 0x46f5d0 <scsi_write_data>, cancel_io = 0x46eb30 
<scsi_cancel_io>, 
|   get_buf = 0x46f300 <scsi_get_buf>}
| (gdb) p s->current
| $3 = (lsi_request *) 0x0

That's weird, since qemu_mallocz checks for NULL.  Corruption
somewhere?

| (gdb) p n
| $4 = 656877154
| (gdb) p s->select_tag
| $5 = 65553
| (gdb) quit

Puzzled,
Jonathan

$ uname -a
Linux elie 2.6.39-rc5-amd64 #1 SMP Sat Apr 30 05:48:55 UTC 2011 x86_64 GNU/Linux
$ /lib/libc.so.6 | head -1
GNU C Library (Debian EGLIBC 2.13-4) stable release version 2.13, by Roland 
McGrath et al.



--- End Message ---
--- Begin Message ---
Version: 0.15.0~rc2+dfsg-1

Jonathan Nieder wrote:

> | $ qemu-system-arm  -M versatilepb -kernel vmlinuz-2.6.37-2-versatile \
> |     -initrd initrd.gz -hda arm-install.qemu
> | Segmentation fault (core dumped)

Fixed by v0.15.0-rc0~237^2~11 (scsi: do not call send_command
directly, 2011-04-28), whose nice commit message on-list that
indicated so was unfortunately not actually commited.

(I finally found a moment to test qemu in experimental to verify.)
Thanks much.


--- End Message ---

Reply via email to