https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211746
--- Comment #12 from Dexuan Cui <de...@microsoft.com> --- (In reply to Marcel Moolenaar from comment #10) Hi Mercel, You're correct about the second bug -- we don't hit the second bug just because we are lucky: when accessing 0xf37cb000, we actually access 0x337cb000, since 0xf - 0x4 * 3 == 0x3. This is my understanding. I made the below changes and got the new log: + staging = 0x40000000; /* 1GB */ - status = BS->AllocatePages(AllocateAnyPages, EfiLoaderData, + status = BS->AllocatePages(AllocateMaxAddress, EfiLoaderData, STAGE_PAGES, &staging); efi_copy_finish: calling trampoline efi_copy_finish: staging=3d000000 efi_copy_finish: staging_end=40000000 efi_copy_finish: staging_offset=3ce00000 efi_copy_finish: src=0x3d000000, dst=0x200000, last=0x40000000 ... trying to write: 0(0x3fd72fe0) to 0(0x2f72fe0) trying to write: 0(0x3fd72fe8) to 0(0x2f72fe8) trying to write: 0(0x3fd72ff0) to 0(0x2f72ff0) trying to write: 0(0x3fd72ff8) to 0(0x2f72ff8) trying to write: 0(0x3fd73000) to 2f74023(0x2f73000) Dexuan: Crash!!! -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-virtualization@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-virtualization To unsubscribe, send any mail to "freebsd-virtualization-unsubscr...@freebsd.org"