19a5452723
Include the qtest reproducer provided by Alexander Bulekov in https://gitlab.com/qemu-project/qemu/-/issues/542. Without the previous commit, we get: $ make check-qtest-i386 ... Running test tests/qtest/intel-hda-test AddressSanitizer:DEADLYSIGNAL ================================================================= ==1580408==ERROR: AddressSanitizer: stack-overflow on address 0x7ffc3d566fe0 #0 0x63d297cf in address_space_translate_internal softmmu/physmem.c:356 #1 0x63d27260 in flatview_do_translate softmmu/physmem.c:499:15 #2 0x63d27af5 in flatview_translate softmmu/physmem.c:565:15 #3 0x63d4ce84 in flatview_write softmmu/physmem.c:2850:10 #4 0x63d4cb18 in address_space_write softmmu/physmem.c:2950:18 #5 0x63d4d387 in address_space_rw softmmu/physmem.c:2960:16 #6 0x62ae12f2 in dma_memory_rw_relaxed include/sysemu/dma.h:89:12 #7 0x62ae104a in dma_memory_rw include/sysemu/dma.h:132:12 #8 0x62ae6157 in dma_memory_write include/sysemu/dma.h:173:12 #9 0x62ae5ec0 in stl_le_dma include/sysemu/dma.h:275:1 #10 0x62ae5ba2 in stl_le_pci_dma include/hw/pci/pci.h:871:1 #11 0x62ad59a6 in intel_hda_response hw/audio/intel-hda.c:372:12 #12 0x62ad2afb in hda_codec_response hw/audio/intel-hda.c:107:5 #13 0x62aec4e1 in hda_audio_command hw/audio/hda-codec.c:655:5 #14 0x62ae05d9 in intel_hda_send_command hw/audio/intel-hda.c:307:5 #15 0x62adff54 in intel_hda_corb_run hw/audio/intel-hda.c:342:9 #16 0x62adc13b in intel_hda_set_corb_wp hw/audio/intel-hda.c:548:5 #17 0x62ae5942 in intel_hda_reg_write hw/audio/intel-hda.c:977:9 #18 0x62ada10a in intel_hda_mmio_write hw/audio/intel-hda.c:1054:5 #19 0x63d8f383 in memory_region_write_accessor softmmu/memory.c:492:5 #20 0x63d8ecc1 in access_with_adjusted_size softmmu/memory.c:554:18 #21 0x63d8d5d6 in memory_region_dispatch_write softmmu/memory.c:1504:16 #22 0x63d5e85e in flatview_write_continue softmmu/physmem.c:2812:23 #23 0x63d4d05b in flatview_write softmmu/physmem.c:2854:12 #24 0x63d4cb18 in address_space_write softmmu/physmem.c:2950:18 #25 0x63d4d387 in address_space_rw softmmu/physmem.c:2960:16 #26 0x62ae12f2 in dma_memory_rw_relaxed include/sysemu/dma.h:89:12 #27 0x62ae104a in dma_memory_rw include/sysemu/dma.h:132:12 #28 0x62ae6157 in dma_memory_write include/sysemu/dma.h:173:12 #29 0x62ae5ec0 in stl_le_dma include/sysemu/dma.h:275:1 #30 0x62ae5ba2 in stl_le_pci_dma include/hw/pci/pci.h:871:1 #31 0x62ad59a6 in intel_hda_response hw/audio/intel-hda.c:372:12 #32 0x62ad2afb in hda_codec_response hw/audio/intel-hda.c:107:5 #33 0x62aec4e1 in hda_audio_command hw/audio/hda-codec.c:655:5 #34 0x62ae05d9 in intel_hda_send_command hw/audio/intel-hda.c:307:5 #35 0x62adff54 in intel_hda_corb_run hw/audio/intel-hda.c:342:9 #36 0x62adc13b in intel_hda_set_corb_wp hw/audio/intel-hda.c:548:5 #37 0x62ae5942 in intel_hda_reg_write hw/audio/intel-hda.c:977:9 #38 0x62ada10a in intel_hda_mmio_write hw/audio/intel-hda.c:1054:5 #39 0x63d8f383 in memory_region_write_accessor softmmu/memory.c:492:5 #40 0x63d8ecc1 in access_with_adjusted_size softmmu/memory.c:554:18 #41 0x63d8d5d6 in memory_region_dispatch_write softmmu/memory.c:1504:16 #42 0x63d5e85e in flatview_write_continue softmmu/physmem.c:2812:23 #43 0x63d4d05b in flatview_write softmmu/physmem.c:2854:12 #44 0x63d4cb18 in address_space_write softmmu/physmem.c:2950:18 #45 0x63d4d387 in address_space_rw softmmu/physmem.c:2960:16 #46 0x62ae12f2 in dma_memory_rw_relaxed include/sysemu/dma.h:89:12 #47 0x62ae104a in dma_memory_rw include/sysemu/dma.h:132:12 #48 0x62ae6157 in dma_memory_write include/sysemu/dma.h:173:12 ... SUMMARY: AddressSanitizer: stack-overflow softmmu/physmem.c:356 in address_space_translate_internal ==1580408==ABORTING Broken pipe Aborted (core dumped) Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com> Acked-by: Thomas Huth <thuth@redhat.com> Message-Id: <20211218160912.1591633-4-philmd@redhat.com> Signed-off-by: Thomas Huth <thuth@redhat.com> |
||
---|---|---|
.. | ||
fuzz | ||
libqos | ||
ac97-test.c | ||
acpi-utils.c | ||
acpi-utils.h | ||
adm1272-test.c | ||
ahci-test.c | ||
am53c974-test.c | ||
arm-cpu-features.c | ||
aspeed_hace-test.c | ||
aspeed_smc-test.c | ||
bios-tables-test-allowed-diff.h | ||
bios-tables-test.c | ||
boot-order-test.c | ||
boot-sector.c | ||
boot-sector.h | ||
boot-serial-test.c | ||
cdrom-test.c | ||
cmsdk-apb-dualtimer-test.c | ||
cmsdk-apb-timer-test.c | ||
cmsdk-apb-watchdog-test.c | ||
cpu-plug-test.c | ||
dbus-display-test.c | ||
dbus-vmstate-test.c | ||
device-introspect-test.c | ||
device-plug-test.c | ||
display-vga-test.c | ||
drive_del-test.c | ||
ds1338-test.c | ||
e1000-test.c | ||
e1000e-test.c | ||
eepro100-test.c | ||
emc141x-test.c | ||
endianness-test.c | ||
erst-test.c | ||
es1370-test.c | ||
fdc-test.c | ||
fuzz-e1000e-test.c | ||
fuzz-lsi53c895a-test.c | ||
fuzz-megasas-test.c | ||
fuzz-sb16-test.c | ||
fuzz-sdcard-test.c | ||
fuzz-virtio-scsi-test.c | ||
fuzz-xlnx-dp-test.c | ||
fw_cfg-test.c | ||
hd-geo-test.c | ||
hexloader-test.c | ||
i440fx-test.c | ||
i82801b11-test.c | ||
ide-test.c | ||
intel-hda-test.c | ||
ioh3420-test.c | ||
ipmi-bt-test.c | ||
ipmi-kcs-test.c | ||
ipoctal232-test.c | ||
isl_pmbus_vr-test.c | ||
ivshmem-test.c | ||
libqtest-single.h | ||
libqtest.c | ||
lpc-ich9-test.c | ||
lsm303dlhc-mag-test.c | ||
m48t59-test.c | ||
machine-none-test.c | ||
max34451-test.c | ||
megasas-test.c | ||
meson.build | ||
microbit-test.c | ||
migration-helpers.c | ||
migration-helpers.h | ||
migration-test.c | ||
modules-test.c | ||
ne2000-test.c | ||
npcm7xx_adc-test.c | ||
npcm7xx_emc-test.c | ||
npcm7xx_gpio-test.c | ||
npcm7xx_pwm-test.c | ||
npcm7xx_rng-test.c | ||
npcm7xx_sdhci-test.c | ||
npcm7xx_smbus-test.c | ||
npcm7xx_timer-test.c | ||
npcm7xx_watchdog_timer-test.c | ||
numa-test.c | ||
nvme-test.c | ||
pca9552-test.c | ||
pci-test.c | ||
pcnet-test.c | ||
pflash-cfi02-test.c | ||
pnv-xscom-test.c | ||
prom-env-test.c | ||
pvpanic-pci-test.c | ||
pvpanic-test.c | ||
pxe-test.c | ||
q35-test.c | ||
qmp-cmd-test.c | ||
qmp-test.c | ||
qom-test.c | ||
qos-test.c | ||
rtas-test.c | ||
rtc-test.c | ||
rtl8139-test.c | ||
sdhci-test.c | ||
spapr-phb-test.c | ||
sse-timer-test.c | ||
tco-test.c | ||
test-arm-mptimer.c | ||
test-filter-mirror.c | ||
test-filter-redirector.c | ||
test-hmp.c | ||
test-netfilter.c | ||
test-x86-cpuid-compat.c | ||
tmp105-test.c | ||
tpm-crb-swtpm-test.c | ||
tpm-crb-test.c | ||
tpm-emu.c | ||
tpm-emu.h | ||
tpm-tests.c | ||
tpm-tests.h | ||
tpm-tis-device-swtpm-test.c | ||
tpm-tis-device-test.c | ||
tpm-tis-swtpm-test.c | ||
tpm-tis-test.c | ||
tpm-tis-util.c | ||
tpm-tis-util.h | ||
tpm-util.c | ||
tpm-util.h | ||
tulip-test.c | ||
usb-hcd-ehci-test.c | ||
usb-hcd-ohci-test.c | ||
usb-hcd-uhci-test.c | ||
usb-hcd-xhci-test.c | ||
vhost-user-blk-test.c | ||
vhost-user-test.c | ||
virtio-9p-test.c | ||
virtio-blk-test.c | ||
virtio-ccw-test.c | ||
virtio-iommu-test.c | ||
virtio-net-failover.c | ||
virtio-net-test.c | ||
virtio-rng-test.c | ||
virtio-scsi-test.c | ||
virtio-serial-test.c | ||
virtio-test.c | ||
vmgenid-test.c | ||
vmxnet3-test.c | ||
wdt_ib700-test.c | ||
xlnx-can-test.c |