Package: qemu-system
Version: 0.14.0+dfsg-5.1
Severity: important

Hi,

| $ qemu-img create arm-install.qemu 10G
| Formatting 'arm-install.qemu', fmt=raw size=10737418240 
| $ wget 
http://d-i.debian.org/daily-images/armel/daily/versatile/netboot/initrd.gz
| [...]
| $ wget 
http://d-i.debian.org/daily-images/armel/daily/versatile/netboot/vmlinuz-2.6.37-2-versatile
| [...]
| $ sha1sum initrd.gz vmlinuz-2.6.37-2-versatile 
| 9822cd356e2e66c0ee2d08f2dfc100f074683b81  initrd.gz
| 81aa8f15f6d0fb3fa971d859787f89eec653d1a3  vmlinuz-2.6.37-2-versatile
| $ qemu-system-arm  -M versatilepb -kernel vmlinuz-2.6.37-2-versatile \
|       -initrd initrd.gz -hda arm-install.qemu
| Segmentation fault (core dumped)

Missing in the above transcript is where I was in the installation process.

 1. choice of keymap, mirror, etc are boring
 2. it asks for a root password.  I leave it blank.
 3. it asks for a new account.  I make "sudoer".
 4. it wants a password.  I give one.
 5. clock-setup: rdate: 0.debian.pool.ntp.org: Name or service not known
    (yep, known problem with the DNS server used)
 6. I choose a time zone and switch to vt4 so I can see messages.
 7. The messages scroll too quickly for me to see.  Something about SCSI,
    among other things.  Segfault.

So I tried building 60d6e50c from the packaging repo.  Backtrace:

| (gdb) bt full
| #0  0x000000000056a2b0 in lsi_do_command (s=0x13e2b40) at 
/home/jrn/src/qemu/hw/lsi53c895a.c:762
|         dev = 0x13e5d50
|         buf = "\000\000\000\000\000\000\000\000y\356Q\000\000\000\000"
|         n = 656877154
| #1  lsi_execute_script (s=0x13e2b40) at 
/home/jrn/src/qemu/hw/lsi53c895a.c:1131
|         insn = 20864336
|         addr = 97140572
|         addr_high = <value optimized out>
|         opcode = <value optimized out>
|         insn_processed = 18
| #2  0x000000000056b794 in lsi_reg_writeb (s=0x13e2b40, offset=<value 
optimized out>, val=32 ' ')
|     at /home/jrn/src/qemu/hw/lsi53c895a.c:1720
| No locals.
| #3  0x00000000419006ee in ?? ()
| No symbol table info available.
| #4  0x0000000000000040 in ?? ()
| No symbol table info available.
| #5  0x0000000000000000 in ?? ()
| No symbol table info available.

lsi53c895a.c:762 is "dev->info->read_data(dev, s->current->tag);".

| (gdb) p *dev->info
| $2 = {qdev = {name = 0x600e62 "scsi-disk", fw_name = 0x600e67 "disk", alias = 
0x0, 
|     desc = 0x600e6c "virtual scsi disk or cdrom", size = 248, props = 
0x8fe0c0, no_user = 0, 
|     reset = 0x46f3d0 <scsi_disk_reset>, vmsd = 0x0, init = 0x471e30 
<scsi_qdev_init>, 
|     unplug = 0x497450 <qdev_simple_unplug_cb>, exit = 0x471f30 
<scsi_qdev_exit>, bus_info = 0x8fe420, 
|     next = 0x8fd9c0}, init = 0x46f130 <scsi_disk_initfn>, destroy = 0x46f450 
<scsi_destroy>, 
|   send_command = 0x470480 <scsi_send_command>, read_data = 0x46f0a0 
<scsi_read_data>, 
|   write_data = 0x46f5d0 <scsi_write_data>, cancel_io = 0x46eb30 
<scsi_cancel_io>, 
|   get_buf = 0x46f300 <scsi_get_buf>}
| (gdb) p s->current
| $3 = (lsi_request *) 0x0

That's weird, since qemu_mallocz checks for NULL.  Corruption
somewhere?

| (gdb) p n
| $4 = 656877154
| (gdb) p s->select_tag
| $5 = 65553
| (gdb) quit

Puzzled,
Jonathan

$ uname -a
Linux elie 2.6.39-rc5-amd64 #1 SMP Sat Apr 30 05:48:55 UTC 2011 x86_64 GNU/Linux
$ /lib/libc.so.6 | head -1
GNU C Library (Debian EGLIBC 2.13-4) stable release version 2.13, by Roland 
McGrath et al.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to