[Qemu-devel] qemu git (f03d07d46) / e100 / sending large packets causes SIGABRT

[Oleksii Shevchuk]

1. qemu-kvm -sdl -nodefaults -name NP1-C1                           \
  -uuid b71057e9-5705-420b-a780-52339afa6ed9                        \
  -boot c                                                           \
  -hda np1UD.disk                                                   \
  -hdb fat:exchange                                                 \
  -device i82559c,netdev=vin0,romfile="",mac="00:11:22:33:44:54"    \
  -netdev tap,id=vin0,ifname=vin0,script=no                         \
  -device cirrus-vga                                                \
  -serial pty                                                       \
  &

2. ping -s 65000

3. Program received signal SIGABRT, Aborted.
#0  0x00007f9aa35e62a9 in __GI_raise (address@hidden) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007f9aa35e7608 in __GI_abort () at abort.c:90
#2  0x00007f9aa97cb9ac in address_space_rw (address@hidden, addr=0x86fa453c, 
address@hidden, buf=0x7f9a97ffe55e 
"address@hidden:9\337\070\071\071\332G;:\340\071::\336H<;\341:;;\342I=<\342;<<\346J>=\343<==\352K?>\344=>>",
 '\377' <repeats 92 times>..., address@hidden '\377' <repeats 200 times>..., 
len=0x3, address@hidden, address@hidden) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/exec.c:2005
#3  0x00007f9aa96d6349 in dma_memory_rw_relaxed (dir=DMA_DIRECTION_TO_DEVICE, 
len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, as=0x7f9aac086a40) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/sysemu/dma.h:90
#4  dma_memory_rw (dir=DMA_DIRECTION_TO_DEVICE, len=0x53f, buf=0x7f9a97ffe022, 
addr=0x86fa4000, as=0x7f9aac086a40) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/sysemu/dma.h:112
#5  pci_dma_rw (dir=DMA_DIRECTION_TO_DEVICE, len=0x53f, buf=0x7f9a97ffe022, 
addr=0x86fa4000, dev=0x7f9aac086820) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/hw/pci/pci.h:652
#6  pci_dma_read (len=0x53f, buf=0x7f9a97ffe022, addr=0x86fa4000, 
dev=0x7f9aac086820) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/include/hw/pci/pci.h:659
#7  tx_command (address@hidden) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:804
#8  0x00007f9aa96d6e38 in action_command (address@hidden) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:906
#9  0x00007f9aa96d70fb in eepro100_cu_command (address@hidden, address@hidden) 
at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:980
#10 0x00007f9aa96d8065 in eepro100_write_command (val=<optimized out>, 
s=0x7f9aac086820) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:1074
#11 eepro100_write1 (s=0x7f9aac086820, addr=<optimized out>, val=<optimized 
out>) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/hw/net/eepro100.c:1457
#12 0x00007f9aa981d012 in access_with_adjusted_size (address@hidden, 
address@hidden, address@hidden, access_size_min=<optimized out>, 
access_size_max=<optimized out>, access=0x7f9aa981d1c0 
<memory_region_write_accessor>, opaque=0x7f9aac086fd8) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/memory.c:436
#13 0x00007f9aa9822153 in memory_region_dispatch_write (size=0x1, data=0x20, 
addr=0x2, mr=0x7f9aac086fd8) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/memory.c:978
#14 io_mem_write (address@hidden, addr=0x2, val=<optimized out>, 
address@hidden) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/memory.c:1737
#15 0x00007f9aa97cb9fd in address_space_rw (address@hidden 
<address_space_memory>, addr=0xfe001002, address@hidden " \242\005\272", 
len=0x1, is_write=0x1) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/exec.c:1967
#16 0x00007f9aa97cbcb5 in cpu_physical_memory_rw (addr=<optimized out>, 
address@hidden " \242\005\272", len=<optimized out>, is_write=<optimized out>) 
at /tmp/portage/app-emulation/qemu-9999/work/qemu-9999/exec.c:2036
#17 0x00007f9aa981bfe5 in kvm_cpu_exec (address@hidden) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/kvm-all.c:1673
#18 0x00007f9aa97c1f7a in qemu_kvm_cpu_thread_fn (arg=0x7f9aabfe1550) at 
/tmp/portage/app-emulation/qemu-9999/work/qemu-9999/cpus.c:785
#19 0x00007f9aa70b5d63 in start_thread (arg=0x7f9a97fff700) at 
pthread_create.c:308
#20 0x00007f9aa3698cfd in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:113