Re: VirtioSound device emulation implementation

2021-01-07 Thread Shreyansh Chouhan
On Thu, 7 Jan 2021 at 22:49, Alex Bennée wrote: > > Shreyansh Chouhan writes: > > > On Wed, 6 Jan 2021 at 17:12, Alex Bennée wrote: > > > >> > >> Shreyansh Chouhan writes: > >> > >> > Hey everyone! > >> > > >> > I want to work on implementing the emulation for the VritioSound > device. > >> I

Re: [PATCH] configure: Add flags for MinGW32 standalone build

2021-01-07 Thread Thomas Huth
On 07/01/2021 22.38, Joshua Watt wrote: There are two cases that need to be accounted for when compiling QEMU for MinGW32: 1) A standalone distribution, where QEMU is self contained and extracted by the user, such as a user would download from the QEMU website. In this case, all of

Re: [PATCH] vnc: add qmp to support change authz

2021-01-07 Thread Zihao Chang
Hi, On 2021/1/8 0:04, Gerd Hoffmann wrote: > Hi, > >> This patch add a new qmp 'change-vnc-authz' to support change the >> tls/sasl authz of vm. If index='', unset tlsauthzid/sasl.authzid >> { >>"execute":"change-vnc-authz", >>"arguments":{ >> "index":"object-authz-id", >>

Re: [PATCH v11 00/13] hw/block/nvme: Support Namespace Types and Zoned Namespace Command Set

2021-01-07 Thread Klaus Jensen
On Dec 9 10:57, Klaus Jensen wrote: > Hi Dmitry, > > By and large, this looks OK to me. There are still some issues here and > there, and some comments of mine that you did not address, but I will > follow up with patches to fix that. Let's get this merged. > > It looks like the nvme-next you

[PATCH v6 7/7] fuzz: heuristic split write based on past IOs

2021-01-07 Thread Qiuhao Li
If previous write commands write the same length of data with the same step, we view it as a hint. Signed-off-by: Qiuhao Li Reviewed-by: Alexander Bulekov Tested-by: Alexander Bulekov --- scripts/oss-fuzz/minimize_qtest_trace.py | 56 1 file changed, 56 insertions(+)

[PATCH v6 6/7] fuzz: add minimization options

2021-01-07 Thread Qiuhao Li
-M1: remove IO commands iteratively -M2: try setting bits in operand of write/out to zero Signed-off-by: Qiuhao Li Reviewed-by: Alexander Bulekov Tested-by: Alexander Bulekov --- scripts/oss-fuzz/minimize_qtest_trace.py | 30 1 file changed, 26 insertions(+), 4

[PATCH v6 5/7] fuzz: set bits in operand of write/out to zero

2021-01-07 Thread Qiuhao Li
Simplifying the crash cases by opportunistically setting bits in operands of out/write to zero may help to debug, since usually bit one means turn on or trigger a function while zero is the default turn-off setting. Tested Bug 1908062. Signed-off-by: Qiuhao Li Reviewed-by: Alexander Bulekov

[PATCH v6 4/7] fuzz: remove IO commands iteratively

2021-01-07 Thread Qiuhao Li
Now we use a one-time scan and remove strategy in the minimizer, which is not suitable for timing dependent instructions. For example, instruction A will indicate an address where the config chunk locates, and instruction B will make the configuration active. If we have the following instruction

[PATCH v6 3/7] fuzz: split write operand using binary approach

2021-01-07 Thread Qiuhao Li
Currently, we split the write commands' data from the middle. If it does not work, try to move the pivot left by one byte and retry until there is no space. But, this method has two flaws: 1. It may fail to trim all unnecessary bytes on the right side. For example, there is an IO write command:

[PATCH v6 2/7] fuzz: double the IOs to remove for every loop

2021-01-07 Thread Qiuhao Li
Instead of removing IO instructions one by one, we can try deleting multiple instructions at once. According to the locality of reference, we double the number of instructions to remove for the next round and recover it to one once we fail. This patch is usually significant for large input. Test

[PATCH v6 1/7] fuzz: accelerate non-crash detection

2021-01-07 Thread Qiuhao Li
We spend much time waiting for the timeout program during the minimization process until it passes a time limit. This patch hacks the CLOSED (indicates the redirection file closed) notification in QTest's output if it doesn't crash. Test with quadrupled trace input at:

[PATCH v6 0/7] fuzz: improve crash case minimization

2021-01-07 Thread Qiuhao Li
Extend and refine the crash case minimization process. Test input: Bug 1909261 full_reproducer 6500 QTest instructions (write mostly) Refined (-M1 minimization level) vs. Original version: real 38m31.942s <-- real 532m57.192s user 28m18.188s <-- user 89m0.536s sys 12m42.239s

Re: [PATCH v5 0/7] fuzz: improve crash case minimization

2021-01-07 Thread Qiuhao Li
On Thu, 2021-01-07 at 23:30 -0500, Alexander Bulekov wrote: > Hi Qiuhao, > Can you add my Reviewed-by: tags to the patches that I have reviewed? > Thanks > -Alex Ok, fixed in version 6, thanks. > > On 210108 1044, Qiuhao Li wrote: > > Extend and refine the crash case minimization process. > >

Re: [Linuxarm] Re: [RFC PATCH v2 07/32] hw/cxl/device: Implement basic mailbox (8.2.8.4)

2021-01-07 Thread Ben Widawsky
On 21-01-06 11:08:28, Ben Widawsky wrote: > On 21-01-06 10:05:57, Ben Widawsky wrote: > > On 21-01-06 17:40:14, Jonathan Cameron wrote: > > > On Wed, 6 Jan 2021 13:21:23 + > > > Jonathan Cameron wrote: > > > > > > > On Tue, 5 Jan 2021 08:52:58 -0800 > > > > Ben Widawsky wrote: > > > > > >

Re: [for-6.0 v5 03/13] securable guest memory: Handle memory encryption via interface

2021-01-07 Thread David Gibson
On Fri, Dec 04, 2020 at 02:10:05PM +0100, Cornelia Huck wrote: > On Fri, 4 Dec 2020 16:44:05 +1100 > David Gibson wrote: > > > At the moment AMD SEV sets a special function pointer, plus an opaque > > handle in KVMState to let things know how to encrypt guest memory. > > > > Now that we have a

Re: [for-6.0 v5 10/13] spapr: Add PEF based securable guest memory

2021-01-07 Thread David Gibson
On Tue, Jan 05, 2021 at 03:34:38PM -0800, Ram Pai wrote: > On Fri, Dec 04, 2020 at 04:44:12PM +1100, David Gibson wrote: > > Some upcoming POWER machines have a system called PEF (Protected > > Execution Facility) which uses a small ultravisor to allow guests to > > run in a way that they can't be

Re: [PATCH v2 0/7] macio: remove PIC object property links

2021-01-07 Thread David Gibson
On Thu, Jan 07, 2021 at 02:26:33PM +, Mark Cave-Ayland wrote: > On 29/12/2020 17:56, Mark Cave-Ayland wrote: > > > This patchset follows on from the dicussion at > > https://lists.gnu.org/archive/html/qemu-devel/2020-11/msg02630.html > > where the user_creatable flag for the macio devices

Re: [PATCH v6 00/35] Hexagon patch series

2021-01-07 Thread no-reply
Patchew URL: https://patchew.org/QEMU/1610080146-14968-1-git-send-email-tsimp...@quicinc.com/ Hi, This series seems to have some coding style problems. See output below for more information: Type: series Message-id: 1610080146-14968-1-git-send-email-tsimp...@quicinc.com Subject: [PATCH v6

Re: [PATCH v4 0/7] fuzz: improve crash case minimization

2021-01-07 Thread Alexander Bulekov
On 201229 1239, Qiuhao Li wrote: > Extend and refine the crash case minimization process. > Hi Qiuhao, For this whole series: Tested-by: Alexander Bulekov Thank you for this effort! - it is a big improvement over what we had. -Alex > Test input: > Bug 1909261 full_reproducer > 6500 QTest

[PATCH v6 28/35] Hexagon (target/hexagon) TCG for floating point instructions

2021-01-07 Thread Taylor Simpson
The imported code uses host floating point. We override them to use qemu softfloat Signed-off-by: Taylor Simpson --- target/hexagon/gen_tcg.h | 121 +++ 1 file changed, 121 insertions(+) diff --git a/target/hexagon/gen_tcg.h

[PATCH v6 34/35] Auto-import Docker support files

2021-01-07 Thread Taylor Simpson
From: Alessandro Di Federico Signed-off-by: Alessandro Di Federico --- tests/docker/docker.py | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/tests/docker/docker.py b/tests/docker/docker.py index 36b7868..d473566 100755 --- a/tests/docker/docker.py +++

[PATCH v6 22/35] Hexagon (target/hexagon) generater phase 4 - decode tree

2021-01-07 Thread Taylor Simpson
Python script that emits the decode tree in dectree_generated.h. Signed-off-by: Taylor Simpson --- target/hexagon/dectree.py | 351 ++ 1 file changed, 351 insertions(+) create mode 100755 target/hexagon/dectree.py diff --git

[PATCH v6 33/35] Add Dockerfile for hexagon

2021-01-07 Thread Taylor Simpson
From: Alessandro Di Federico Signed-off-by: Alessandro Di Federico --- .../debian-hexagon-cross.build-toolchain.sh| 141 + .../docker/dockerfiles/debian-hexagon-cross.docker | 18 +++ tests/tcg/configure.sh | 4 + 3 files changed, 163

[PATCH v6 19/35] Hexagon (target/hexagon) generator phase 1 - C preprocessor for semantics

2021-01-07 Thread Taylor Simpson
Run the C preprocessor across the instruction definition files and macro definition file to expand macros and prepare the semantics_generated.pyinc file. The resulting file contains one entry with the semantics for each instruction and one line with the instruction attributes associated with each

[PATCH v6 25/35] Hexagon (target/hexagon) instruction classes

2021-01-07 Thread Taylor Simpson
Determine legal VLIW slots for each instruction Signed-off-by: Taylor Simpson --- target/hexagon/iclass.h| 50 ++ target/hexagon/iclass.c| 73 ++ target/hexagon/imported/iclass.def | 51

[PATCH v6 27/35] Hexagon (target/hexagon) TCG for instructions with multiple definitions

2021-01-07 Thread Taylor Simpson
Helpers won't work if there are multiple definitions, so we override these instructions using #define fGEN_TCG_. Signed-off-by: Taylor Simpson --- target/hexagon/gen_tcg.h | 198 +++ 1 file changed, 198 insertions(+) create mode 100644

[PATCH v6 20/35] Hexagon (target/hexagon) generator phase 2 - generate header files

2021-01-07 Thread Taylor Simpson
Python scripts generate the following files helper_protos_generated.h For each instruction we create DEF_HELPER function prototype helper_funcs_generated.h For each instruction we create the helper function definition tcg_funcs_generated.h For each instruction

[PATCH v6 13/35] Hexagon (target/hexagon) instruction/packet decode

2021-01-07 Thread Taylor Simpson
Take the words from instruction memory and build a packet_t for TCG code generation The following operations are performed Convert the .new encoded offset to the register number of the producer Reorder the packet so .new producer is before consumer Apply constant extenders

Re: [PATCH v4 7/7] fuzz: heuristic split write based on past IOs

2021-01-07 Thread Alexander Bulekov
On 201229 1240, Qiuhao Li wrote: > If previous write commands write the same length of data with the same step, > we view it as a hint. > > Signed-off-by: Qiuhao Li Reviewed-by: Alexander Bulekov > --- > scripts/oss-fuzz/minimize_qtest_trace.py | 56 > 1 file

Re: [PATCH v5 0/7] fuzz: improve crash case minimization

2021-01-07 Thread Alexander Bulekov
Hi Qiuhao, Can you add my Reviewed-by: tags to the patches that I have reviewed? Thanks -Alex On 210108 1044, Qiuhao Li wrote: > Extend and refine the crash case minimization process. > > Test input: > Bug 1909261 full_reproducer > 6500 QTest instructions (write mostly) > > Refined (-M1

[PATCH v6 11/35] Hexagon (target/hexagon) register fields

2021-01-07 Thread Taylor Simpson
Declare bitfields within registers such as user status register (USR) Signed-off-by: Taylor Simpson --- target/hexagon/reg_fields.h | 36 target/hexagon/reg_fields_def.h | 41 + target/hexagon/reg_fields.c | 27

[PATCH v6 29/35] Hexagon (target/hexagon) translation

2021-01-07 Thread Taylor Simpson
Read the instruction memory Create a packet data structure Generate TCG code for the start of the packet Invoke the generate function for each instruction Generate TCG code for the end of the packet Signed-off-by: Taylor Simpson --- target/hexagon/translate.h | 91 ++

[PATCH v6 35/35] Add newline when generating Dockerfile

2021-01-07 Thread Taylor Simpson
From: Alessandro Di Federico Signed-off-by: Alessandro Di Federico --- tests/docker/docker.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/docker/docker.py b/tests/docker/docker.py index d473566..5c318d9 100755 --- a/tests/docker/docker.py +++

[PATCH v6 21/35] Hexagon (target/hexagon) generator phase 3 - C preprocessor for decode tree

2021-01-07 Thread Taylor Simpson
Run the C preprocessor across the instruction definition and encoding files to expand macros and prepare the iset.py file. The resulting fill contains python data structures used to build the decode tree. Signed-off-by: Taylor Simpson Reviewed-by: Philippe Mathieu-Daudé

[PATCH v6 32/35] Hexagon build infrastructure

2021-01-07 Thread Taylor Simpson
Add file to default-configs Add hexagon to meson.build Add hexagon to target/meson.build Add target/hexagon/meson.build Change scripts/qemu-binfmt-conf.sh We can build a hexagon-linux-user target and run programs on the Hexagon scalar core. With hexagon-linux-clang installed, "make check-tcg"

[PATCH v6 07/35] Hexagon (target/hexagon) scalar core helpers

2021-01-07 Thread Taylor Simpson
The majority of helpers are generated. Define the helper functions needed then include the generated file Signed-off-by: Taylor Simpson --- target/hexagon/helper.h| 85 target/hexagon/op_helper.c | 1016 2 files changed, 1101

[PATCH v6 30/35] Hexagon (linux-user/hexagon) Linux user emulation

2021-01-07 Thread Taylor Simpson
Implementation of Linux user emulation for Hexagon Some common files modified in addition to new files in linux-user/hexagon Signed-off-by: Taylor Simpson Reviewed-by: Richard Henderson --- linux-user/hexagon/sockbits.h | 18 ++ linux-user/hexagon/syscall_nr.h | 322

[PATCH v6 24/35] Hexagon (target/hexagon) macros

2021-01-07 Thread Taylor Simpson
macros to interface with the generator macros referenced in instruction semantics Signed-off-by: Taylor Simpson --- target/hexagon/macros.h | 591 1 file changed, 591 insertions(+) create mode 100644 target/hexagon/macros.h diff --git

[PATCH v6 15/35] Hexagon (target/hexagon/arch.[ch]) utility functions

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/arch.h | 35 ++ target/hexagon/arch.c | 294 ++ 2 files changed, 329 insertions(+) create mode 100644 target/hexagon/arch.h create mode 100644 target/hexagon/arch.c diff --git

[PATCH v6 06/35] Hexagon (target/hexagon) register names

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson Reviewed-by: Richard Henderson --- target/hexagon/hex_regs.h | 83 +++ 1 file changed, 83 insertions(+) create mode 100644 target/hexagon/hex_regs.h diff --git a/target/hexagon/hex_regs.h b/target/hexagon/hex_regs.h new

[PATCH v6 05/35] Hexagon (disas) disassembler

2021-01-07 Thread Taylor Simpson
Add hexagon to disas/meson.build Add disas/hexagon.c Add hexagon to include/disas/dis-asm.h Signed-off-by: Taylor Simpson --- include/disas/dis-asm.h | 1 + disas/hexagon.c | 68 + disas/meson.build | 1 + 3 files changed, 70

[PATCH v6 23/35] Hexagon (target/hexagon) opcode data structures

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/opcodes.h | 63 + target/hexagon/opcodes.c | 142 +++ 2 files changed, 205 insertions(+) create mode 100644 target/hexagon/opcodes.h create mode 100644 target/hexagon/opcodes.c

[PATCH v6 10/35] Hexagon (target/hexagon) instruction and packet types

2021-01-07 Thread Taylor Simpson
The insn_t and packet_t are the interface between instruction decoding and TCG code generation Signed-off-by: Taylor Simpson --- target/hexagon/insn.h | 74 +++ 1 file changed, 74 insertions(+) create mode 100644 target/hexagon/insn.h diff --git

[PATCH v6 02/35] Hexagon (target/hexagon) README

2021-01-07 Thread Taylor Simpson
Gives an introduction and overview to the Hexagon target Signed-off-by: Taylor Simpson --- target/hexagon/README | 235 ++ 1 file changed, 235 insertions(+) create mode 100644 target/hexagon/README diff --git a/target/hexagon/README

[PATCH v6 16/35] Hexagon (target/hexagon/conv_emu.[ch]) utility functions

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/conv_emu.h | 31 target/hexagon/conv_emu.c | 177 ++ 2 files changed, 208 insertions(+) create mode 100644 target/hexagon/conv_emu.h create mode 100644 target/hexagon/conv_emu.c diff --git

[PATCH v6 12/35] Hexagon (target/hexagon) instruction attributes

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/attribs.h | 30 ++ target/hexagon/attribs_def.h | 97 2 files changed, 127 insertions(+) create mode 100644 target/hexagon/attribs.h create mode 100644 target/hexagon/attribs_def.h

[PATCH v6 14/35] Hexagon (target/hexagon) instruction printing

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/printinsn.h | 28 target/hexagon/printinsn.c | 158 + 2 files changed, 186 insertions(+) create mode 100644 target/hexagon/printinsn.h create mode 100644 target/hexagon/printinsn.c diff

[PATCH v6 01/35] Hexagon Update MAINTAINERS file

2021-01-07 Thread Taylor Simpson
Add Taylor Simpson as the Hexagon target maintainer Signed-off-by: Taylor Simpson Reviewed-by: Richard Henderson --- MAINTAINERS | 8 1 file changed, 8 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index 42fedf9..a884ad8 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -185,6

[PATCH v6 09/35] Hexagon (target/hexagon) architecture types

2021-01-07 Thread Taylor Simpson
Define types used in files imported from the Hexagon architecture library Signed-off-by: Taylor Simpson --- target/hexagon/hex_arch_types.h | 38 ++ 1 file changed, 38 insertions(+) create mode 100644 target/hexagon/hex_arch_types.h diff --git

[PATCH v6 08/35] Hexagon (target/hexagon) GDB Stub

2021-01-07 Thread Taylor Simpson
GDB register read and write routines Signed-off-by: Taylor Simpson Reviewed-by: Richard Henderson --- target/hexagon/internal.h | 3 +++ target/hexagon/cpu.c | 2 ++ target/hexagon/gdbstub.c | 47 +++ 3 files changed, 52 insertions(+) create

[PATCH v6 17/35] Hexagon (target/hexagon/fma_emu.[ch]) utility functions

2021-01-07 Thread Taylor Simpson
Signed-off-by: Taylor Simpson --- target/hexagon/fma_emu.h | 37 +++ target/hexagon/fma_emu.c | 701 +++ 2 files changed, 738 insertions(+) create mode 100644 target/hexagon/fma_emu.h create mode 100644 target/hexagon/fma_emu.c diff --git

[Bug 1639791] Re: early virtio console output is lost

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1639791 Title: early

[PATCH v6 03/35] Hexagon (include/elf.h) ELF machine definition

2021-01-07 Thread Taylor Simpson
Define EM_HEXAGON 164 Signed-off-by: Taylor Simpson Reviewed-by: Philippe Mathieu-Daudé Tested-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson --- include/elf.h | 1 + 1 file changed, 1 insertion(+) diff --git a/include/elf.h b/include/elf.h index 7a418ee..f4fa3c1 100644 ---

[PATCH v6 26/35] Hexagon (target/hexagon) TCG generation

2021-01-07 Thread Taylor Simpson
Include the generated files and set up the data structures Signed-off-by: Taylor Simpson --- target/hexagon/genptr.h | 25 ++ target/hexagon/genptr.c | 234 2 files changed, 259 insertions(+) create mode 100644 target/hexagon/genptr.h

[PATCH v6 04/35] Hexagon (target/hexagon) scalar core definition

2021-01-07 Thread Taylor Simpson
Add target state header, target definitions and initialization routines Signed-off-by: Taylor Simpson --- target/hexagon/cpu-param.h | 29 + target/hexagon/cpu.h | 159 +++ target/hexagon/cpu_bits.h | 59 + target/hexagon/internal.h | 36 ++

[Bug 1649236] Re: Commit snapshot fails with Permission denied when daemonized

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1649236 Title: Commit

[PATCH v6 00/35] Hexagon patch series

2021-01-07 Thread Taylor Simpson
This series adds support for the Hexagon processor with Linux user support See patch 02/33 Hexagon README for detailed information. This series assumes int128_or() is implemented. https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg06004.html The series is also available at

[Bug 1639983] Re: e1000 EEPROM have bad checksum

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1639983 Title: e1000

[Bug 1649233] Re: scrolling does not work once mouse is grabbed

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1649233 Title: scrolling

[Bug 1644754] Re: gluster partial reads refusal conflicts with qcow2

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1644754 Title: gluster

[Bug 1640073] Re: Guest pause because VMPTRLD failed in KVM

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1640073 Title: Guest

[Bug 1642011] Re: Mouse wheel events not forwarded to guest using GTK display

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1642011 Title: Mouse

[Bug 1636770] Re: mouse wheel works only with -usbdevice tablet

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1636770 Title: mouse

[Bug 1653419] Re: SVM emulation fails due to EIP and FLAG register update optimization

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1653419 Title: SVM

[Bug 1661758] Re: qemu-nbd causes data corruption in VDI-format disk images

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1661758 Title: qemu-nbd

[Bug 1652373] Re: User-mode QEMU is not deterministic

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1652373 Title: User-mode

[Bug 1654826] Re: Holding key down using input-linux freezes guest

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1654826 Title: Holding

[Bug 1648726] Re: [usb-host] Passthrough of UAS devices fails with Windows (10) guests

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1648726 Title: [usb-host]

[Bug 1658141] Re: QEMU's default msrs handling causes Windows 10 64 bit to crash

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1658141 Title: QEMU's

[Bug 1671173] Re: OS started to crash with a message: "Trying to execute code outside RAM or ROM"

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1671173 Title: OS started

[Bug 1662600] Re: error while building from source on Ubuntu 16.04

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1662600 Title: error

[Bug 1656711] Re: GTK3 interface doesn't zoom-to-fit by default

2021-01-07 Thread Launchpad Bug Tracker
[Expired for QEMU because there has been no activity for 60 days.] ** Changed in: qemu Status: Incomplete => Expired -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1656711 Title: GTK3

Re: What's the correct way to implement rfi and related instruction.

2021-01-07 Thread Yonggang Luo
On Fri, Jan 8, 2021 at 5:54 AM Cédric Le Goater wrote: > > On 1/7/21 8:14 PM, 罗勇刚(Yonggang Luo) wrote: > > This is the first patch,: > > It's store MSR bits differntly for different rfi instructions: > > [Qemu-devel] [PATCH] target-ppc: fix RFI by clearing some bits of MSR > >

[PATCH v5 7/7] fuzz: heuristic split write based on past IOs

2021-01-07 Thread Qiuhao Li
If previous write commands write the same length of data with the same step, we view it as a hint. Signed-off-by: Qiuhao Li --- scripts/oss-fuzz/minimize_qtest_trace.py | 56 1 file changed, 56 insertions(+) diff --git a/scripts/oss-fuzz/minimize_qtest_trace.py

[PATCH v5 6/7] fuzz: add minimization options

2021-01-07 Thread Qiuhao Li
-M1: remove IO commands iteratively -M2: try setting bits in operand of write/out to zero Signed-off-by: Qiuhao Li --- scripts/oss-fuzz/minimize_qtest_trace.py | 30 1 file changed, 26 insertions(+), 4 deletions(-) diff --git a/scripts/oss-fuzz/minimize_qtest_trace.py

[PATCH v5 5/7] fuzz: set bits in operand of write/out to zero

2021-01-07 Thread Qiuhao Li
Simplifying the crash cases by opportunistically setting bits in operands of out/write to zero may help to debug, since usually bit one means turn on or trigger a function while zero is the default turn-off setting. Tested Bug 1908062. Signed-off-by: Qiuhao Li ---

[PATCH v5 4/7] fuzz: remove IO commands iteratively

2021-01-07 Thread Qiuhao Li
Now we use a one-time scan and remove strategy in the minimizer, which is not suitable for timing dependent instructions. For example, instruction A will indicate an address where the config chunk locates, and instruction B will make the configuration active. If we have the following instruction

[PATCH v5 3/7] fuzz: split write operand using binary approach

2021-01-07 Thread Qiuhao Li
Currently, we split the write commands' data from the middle. If it does not work, try to move the pivot left by one byte and retry until there is no space. But, this method has two flaws: 1. It may fail to trim all unnecessary bytes on the right side. For example, there is an IO write command:

[PATCH v5 2/7] fuzz: double the IOs to remove for every loop

2021-01-07 Thread Qiuhao Li
Instead of removing IO instructions one by one, we can try deleting multiple instructions at once. According to the locality of reference, we double the number of instructions to remove for the next round and recover it to one once we fail. This patch is usually significant for large input. Test

[PATCH v5 1/7] fuzz: accelerate non-crash detection

2021-01-07 Thread Qiuhao Li
We spend much time waiting for the timeout program during the minimization process until it passes a time limit. This patch hacks the CLOSED (indicates the redirection file closed) notification in QTest's output if it doesn't crash. Test with quadrupled trace input at:

[PATCH v5 0/7] fuzz: improve crash case minimization

2021-01-07 Thread Qiuhao Li
Extend and refine the crash case minimization process. Test input: Bug 1909261 full_reproducer 6500 QTest instructions (write mostly) Refined (-M1 minimization level) vs. Original version: real 38m31.942s <-- real 532m57.192s user 28m18.188s <-- user 89m0.536s sys 12m42.239s

Re: [PATCH v4 4/7] fuzz: loop the remove minimizer and refactoring

2021-01-07 Thread Qiuhao Li
On Wed, 2021-01-06 at 23:53 -0500, Alexander Bulekov wrote: > On 201229 1240, Qiuhao Li wrote: > > Now we use a one-time scan and remove strategy in the remval > > minimizer, > > which is not suitable for timing dependent instructions. > > > > For example, instruction A will indicate an address

Re: [PATCH v4 1/7] fuzz: accelerate non-crash detection

2021-01-07 Thread Qiuhao Li
On Wed, 2021-01-06 at 23:18 -0500, Alexander Bulekov wrote: > On 201229 1240, Qiuhao Li wrote: > > We spend much time waiting for the timeout program during the > > minimization > > process until it passes a time limit. This patch hacks the CLOSED > > (indicates > > the redirection file closed)

Re: [PATCH v1] s390x/tcg: Fix RISBHG

2021-01-07 Thread Nick Desaulniers via
On Thu, Jan 7, 2021 at 3:27 PM David Hildenbrand wrote: > > > > Am 08.01.2021 um 00:21 schrieb Nick Desaulniers : > > > > On Thu, Jan 7, 2021 at 3:13 PM David Hildenbrand wrote: > >> > >> RISBHG is broken and currently hinders clang builds of upstream kernels > >> from booting: the kernel

Re: [PATCH v1] s390x/tcg: Fix RISBHG

2021-01-07 Thread Nick Desaulniers via
On Thu, Jan 7, 2021 at 3:13 PM David Hildenbrand wrote: > > RISBHG is broken and currently hinders clang builds of upstream kernels > from booting: the kernel crashes early, while decompressing the image. > > [...] >Kernel fault: interruption code 0005 ilc:2 >Kernel random base:

Re: [PATCH v1] s390x/tcg: Fix RISBHG

2021-01-07 Thread David Hildenbrand
> Am 08.01.2021 um 00:21 schrieb Nick Desaulniers : > > On Thu, Jan 7, 2021 at 3:13 PM David Hildenbrand wrote: >> >> RISBHG is broken and currently hinders clang builds of upstream kernels >> from booting: the kernel crashes early, while decompressing the image. >> >> [...] >> Kernel

Re: [PULL 00/66] MIPS patches for 2021-01-07

2021-01-07 Thread no-reply
Patchew URL: https://patchew.org/QEMU/2021010753.20382-1-f4...@amsat.org/ Hi, This series seems to have some coding style problems. See output below for more information: Type: series Message-id: 2021010753.20382-1-f4...@amsat.org Subject: [PULL 00/66] MIPS patches for 2021-01-07 ===

[PATCH v1] s390x/tcg: Fix RISBHG

2021-01-07 Thread David Hildenbrand
RISBHG is broken and currently hinders clang builds of upstream kernels from booting: the kernel crashes early, while decompressing the image. [...] Kernel fault: interruption code 0005 ilc:2 Kernel random base: PSW : 20018000 00017a1e R:0 T:0

[Bug 1910605] [NEW] qemu-arm-static ioctl USBDEVFS_BULK return -1 (EFAULT) Bad address

2021-01-07 Thread Linh Hoang
Public bug reported: Snippet of code sample: struct usbdevfs_bulktransfer Bulk; Bulk.ep = hUsb->UsbOut; Bulk.len = Len; Bulk.data = (void *)pData; Bulk.timeout = Timeout; Bytes = ioctl(hUsb->fd, USBDEVFS_BULK, ) The above code sample return -1 (EFAULT) Bad address

Re: [PULL 00/66] MIPS patches for 2021-01-07

2021-01-07 Thread Philippe Mathieu-Daudé
the Git repository at: > > https://gitlab.com/philmd/qemu.git tags/mips-20210107 > > for you to fetch changes up to f97d339d612b86d8d336a11f01719a10893d6707: > > docs/system: Remove deprecated 'fulong2e' machine

[PULL 64/66] target/mips: Convert Rel6 LLD/SCD opcodes to decodetree

2021-01-07 Thread Philippe Mathieu-Daudé
LLD/SCD opcodes have been removed from the Release 6. Add a single decodetree entry for the opcodes, triggering Reserved Instruction if ever used. Remove unreachable check_insn_opc_removed() calls. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id:

[PULL 66/66] docs/system: Remove deprecated 'fulong2e' machine alias

2021-01-07 Thread Philippe Mathieu-Daudé
The 'fulong2e' machine alias has been marked as deprecated since QEMU v5.1 (commit c3a09ff68dd, the machine is renamed 'fuloong2e'). Time to remove it now. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Huacai Chen Reviewed-by: Thomas Huth Message-Id:

[PULL 62/66] target/mips: Convert Rel6 LWLE/LWRE/SWLE/SWRE opcodes to decodetree

2021-01-07 Thread Philippe Mathieu-Daudé
LWLE/LWRE/SWLE/SWRE (EVA) opcodes have been removed from the Release 6. Add a single decodetree entry for the opcodes, triggering Reserved Instruction if ever used. Remove unreachable check_insn_opc_removed() calls. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson

[PULL 65/66] target/mips: Convert Rel6 LL/SC opcodes to decodetree

2021-01-07 Thread Philippe Mathieu-Daudé
LL/SC opcodes have been removed from the Release 6. Add a single decodetree entry for the opcodes, triggering Reserved Instruction if ever used. Remove unreachable check_insn_opc_removed() calls. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id:

Re: [PATCH] target/s390x: Fix ALGSI

2021-01-07 Thread David Hildenbrand
On 07.01.21 21:21, David Hildenbrand wrote: > Looks like something went wrong while touching that line. Instead of "r1" > we need a new temporary. Also, we have to pass MO_TEQ, to indicate that > we are working with 64-bit values. Let's revert these changes. > > Fixes: ff26d287bddc

[PULL 61/66] target/mips: Convert Rel6 LWL/LWR/SWL/SWR opcodes to decodetree

2021-01-07 Thread Philippe Mathieu-Daudé
LWL/LWR/SWL/SWR opcodes have been removed from the Release 6. Add a single decodetree entry for the opcodes, triggering Reserved Instruction if ever used. Remove unreachable check_insn_opc_removed() calls. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id:

[PULL 60/66] target/mips: Convert Rel6 CACHE/PREF opcodes to decodetree

2021-01-07 Thread Philippe Mathieu-Daudé
CACHE/PREF opcodes have been removed from the Release 6. Add a single decodetree entry for the opcodes, triggering Reserved Instruction if ever used. Remove unreachable check_insn_opc_removed() calls. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id:

[PULL 57/66] target/mips: Remove now unreachable LSA/DLSA opcodes code

2021-01-07 Thread Philippe Mathieu-Daudé
Since we switched to decodetree-generated processing, we can remove this now unreachable code. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id: <20201208203704.243704-6-f4...@amsat.org> --- target/mips/translate.c | 29 + 1 file

[PULL 56/66] target/mips: Introduce decodetree helpers for Release6 LSA/DLSA opcodes

2021-01-07 Thread Philippe Mathieu-Daudé
LSA and LDSA opcodes are also available with MIPS release 6. Introduce the decodetree config files and call the decode() helpers in the main decode_opc() loop. Signed-off-by: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Message-Id: <20201215225757.764263-24-f4...@amsat.org> ---

[Bug 1910603] [NEW] [OSS-Fuzz] Issue 29174 sb16: Abrt in audio_bug

2021-01-07 Thread Alexander Bulekov
Public bug reported: === Reproducer === cat << EOF | ../build-system/qemu-system-i386 \ -machine q35 -device sb16,audiodev=snd0 \ -audiodev none,id=snd0 -nographic -nodefaults \ -qtest stdio outw 0x22c 0x41 outb 0x22c 0x0 outw 0x22c 0x1004 outw 0x22c 0x1c EOF === Stack Trace === A bug was just

  1   2   3   4   5   >