I've just tried v2.6.0 with the recent ldstub patch applied and it looks from the output above that you're using an incorrect format to put down the disk label. I see the following:
$ ./qemu-system-sparc -cdrom sol-9-905hw-ga-sparc-dvd.iso -hda /home/build/src/qemu/image/sparc32/sol9.qcow2 -boot d -nographic -prom-env 'auto-boot?=false' Configuration device id QEMU version 1 machine id 32 Probing SBus slot 0 offset 0 Probing SBus slot 1 offset 0 Probing SBus slot 2 offset 0 Probing SBus slot 3 offset 0 Probing SBus slot 4 offset 0 Probing SBus slot 5 offset 0 Invalid FCode start byte CPUs: 1 x FMI,MB86904 UUID: 00000000-0000-0000-0000-000000000000 Welcome to OpenBIOS v1.1 built on Apr 18 2016 08:19 Type 'help' for detailed information 0 > boot cdrom:d -vs Not a bootable ELF image Loading a.out image... Loaded 7680 bytes entry point is 0x4000 bootpath: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@2,0:d Jumping to entry point 00004000 for type 00000005... switching to new context: Size: 0x4624f+0xdaf5+0x1d6a3 Bytes SunOS Release 5.9 Version Generic_118558-34 32-bit Copyright 1983-2003 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms. ... ... INIT: SINGLE USER MODE # format Searching for disks...WARNING: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@0,0 (sd0): Corrupt label; wrong magic number WARNING: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@0,0 (sd0): Corrupt label; wrong magic number done AVAILABLE DISK SELECTIONS: 0. c0t0d0 <drive type unknown> /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@0,0 Specify disk (enter its number): 0 AVAILABLE DRIVE TYPES: 0. Auto configure 1. Quantum ProDrive 80S 2. Quantum ProDrive 105S 3. CDC Wren IV 94171-344 4. SUN0104 5. SUN0207 6. SUN0327 7. SUN0340 8. SUN0424 9. SUN0535 10. SUN0669 11. SUN1.0G 12. SUN1.05 13. SUN1.3G 14. SUN2.1G 15. SUN2.9G 16. Zip 100 17. Zip 250 18. other Specify disk type (enter its number): 18 Enter number of data cylinders: 24620 Enter number of alternate cylinders[2]: Enter number of physical cylinders[24622]: Enter number of heads: 27 Enter physical number of heads[default]: Enter number of data sectors/track: 107 Enter number of physical sectors/track[default]: 107 Enter rpm of drive[3600]: Enter format time[default]: Enter cylinder skew[default]: Enter track skew[default]: Enter tracks per zone[default]: Enter alternate tracks[default]: Enter alternate sectors[default]: Enter cache control[default]: Enter prefetch threshold[default]: Enter minimum prefetch[default]: Enter maximum prefetch[default]: Enter disk type name (remember quotes): Sparc9 selecting c0t0d0 [disk formatted] FORMAT MENU: disk - select a disk type - select (define) a disk type partition - select (define) a partition table current - describe the current disk format - format and analyze the disk repair - repair a defective sector label - write label to the disk analyze - surface analysis defect - defect list management backup - search for backup labels verify - read and display labels save - save new disk/partition definitions inquiry - show vendor, product and revision volname - set 8-character volume name !<cmd> - execute <cmd>, then return quit format> label Ready to label disk, continue? y WARNING: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@0,0 (sd0): Corrupt label; wrong magic number format> label Ready to label disk, continue? y format> q And then after the reboot: $ ./qemu-system-sparc -cdrom sol-9-905hw-ga-sparc-dvd.iso -hda /home/build/src/qemu/image/sparc32/sol9.qcow2 -boot d -nographic Configuration device id QEMU version 1 machine id 32 Probing SBus slot 0 offset 0 Probing SBus slot 1 offset 0 Probing SBus slot 2 offset 0 Probing SBus slot 3 offset 0 Probing SBus slot 4 offset 0 Probing SBus slot 5 offset 0 Invalid FCode start byte CPUs: 1 x FMI,MB86904 UUID: 00000000-0000-0000-0000-000000000000 Welcome to OpenBIOS v1.1 built on Apr 18 2016 08:19 Type 'help' for detailed information Trying cdrom:d... Not a bootable ELF image Loading a.out image... Loaded 7680 bytes entry point is 0x4000 bootpath: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@2,0:d Jumping to entry point 00004000 for type 00000005... switching to new context: SunOS Release 5.9 Version Generic_118558-34 32-bit Copyright 1983-2003 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms. Configuring /dev and /devices NOTICE: Couldn't set value (../../sun/io/audio/sada/drv/audiocs/audio_4231.c, Line #1759 0x00 0x88) audio may not work correctly until it is stopped and restarted Using RPC Bootparams for network configuration information. Skipping interface le0 Searching for configuration file(s)... Search complete. Select a Language 0. English 1. French 2. German 3. Italian 4. Japanese 5. Korean 6. Simplified Chinese 7. Spanish 8. Swedish 9. Traditional Chinese Please make a choice (0 - 9), or press h or ? for help: 0 Select a Locale 0. English (C - 7-bit ASCII) 1. Albania (ISO8859-2) 2. Australia (ISO8859-1) 3. Belgium-Flemish (ISO8859-1) 4. Belgium-Flemish (ISO8859-15 - Euro) 5. Bosnia (ISO8859-2) 6. Brazil (ISO8859-1) 7. Brazil (UTF-8) 8. Bulgaria (ISO8859-5) 9. Canada-English (ISO8859-1) 10. Catalan, Spain (ISO8859-1) 11. Catalan, Spain (ISO8859-15 - Euro) 12. Croatia (ISO8859-2) 13. Czech Republic (ISO8859-2) 14. Denmark (ISO8859-1) 15. Denmark (ISO8859-15 - Euro) 16. Egypt (ISO8859-6) 17. Egypt (UTF-8) 18. Estonia (ISO8859-15) Press Return to show more choices. Please make a choice (0 - 59), or press h or ? for help: 0 What type of terminal are you using? 1) ANSI Standard CRT 2) DEC VT52 3) DEC VT100 4) Heathkit 19 5) Lear Siegler ADM31 6) PC Console 7) Sun Command Tool 8) Sun Workstation 9) Televideo 910 10) Televideo 925 11) Wyse Model 50 12) X Terminal Emulator (xterms) 13) CDE Terminal Emulator (dtterm) 14) Other Type the number of your choice and press Return: 3 syslog service starting. savecore: no dump device configured Running in command line mode Please wait while the system information is loaded... | ... ... Please wait while the system is configured with your settings... Scanning system disk information... Searching disks for upgradable Solaris root devices... No Upgradable Solaris root devices were found. Searching for locations to accommodate a temporary copy of the Solaris installation software. Swap slices are usually erased at reboot, so it is preferable to place the Solaris installation software on slice labeled swap. No swap slices that begin at the first usable cylinder have enough space to accommodate a temporary copy of the Solaris installation software. Using a slice that begins at the first usable cylinder allows the most flexibility during filesystem layout. If you are doing an initial install and you are not preserving any filesystems, you can re-partition a disk with the swap slice starting at the first usable cylinder. Would you like to re-partition a disk? [y,n,?,q] y The default root disk is /dev/dsk/c0t0d0. The selected disk will be re-partitioned before the Solaris installation software is copied to the disk. WARNING: ALL INFORMATION ON THE DISK WILL BE ERASED! Do you want to re-partition /dev/dsk/c0t0d0 [y,n,?,q] y NOTE: The swap size cannot be changed during file system layout. Enter a swap slice size between 158MB and 34729MB, default = 512MB [?] Placing the swap slice at the beginning of the disk will allow the most flexible file system partitioning later in the installation. Can the swap slice start at the beginning of the disk [y,n,?,q] y Confirm Information: Disk Slice : /dev/dsk/c0t0d0s1 Size : 512 MB Start Cyl. : 0 WARNING: ALL INFORMATION ON THE DISK WILL BE ERASED! Is this OK [y,n,?,q] y etc. Please specify the media from which you will install the Solaris Operating Environment. Media: 1. CD/DVD 2. Network File System 3. HTTP (Flash archive only) 4. FTP (Flash archive only) 5. Local Tape (Flash archive only) Media [1]: Reading disc for Solaris Operating Environment... The system is being initialized, please wait... / Sun Microsystems, Inc. Binary Code License Agreement etc. Comparing your output with mine I can see two obvious differences: 1) You are using a different version of Solaris to label the disk in a way that can't be understood by Solaris 9 2) You've mistyped the "Physical number of heads" as 27 rather than accepting the default ATB, Mark. -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1588328 Title: Qemu 2.6 Solaris 9 Sparc Segmentation Fault Status in QEMU: New Bug description: Hi, I tried the following command to boot Solaris 9 sparc: qemu-system-sparc -nographic -boot d -hda ./Spark9.disk -m 256 -cdrom sol-9-905hw-ga-sparc-dvd.iso -serial telnet:0.0.0.0:3000,server It seems there are a few Segmentation Faults, one from the starting of the boot. Another at the beginning of the commandline installation. Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Configuration device id QEMU version 1 machine id 32 Probing SBus slot 0 offset 0 Probing SBus slot 1 offset 0 Probing SBus slot 2 offset 0 Probing SBus slot 3 offset 0 Probing SBus slot 4 offset 0 Probing SBus slot 5 offset 0 Invalid FCode start byte CPUs: 1 x FMI,MB86904 UUID: 00000000-0000-0000-0000-000000000000 Welcome to OpenBIOS v1.1 built on Apr 18 2016 08:19 Type 'help' for detailed information Trying cdrom:d... Not a bootable ELF image Loading a.out image... Loaded 7680 bytes entry point is 0x4000 bootpath: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@2,0:d Jumping to entry point 00004000 for type 00000005... switching to new context: SunOS Release 5.9 Version Generic_118558-34 32-bit Copyright 1983-2003 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms. WARNING: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@0,0 (sd0): Corrupt label; wrong magic number Segmentation Fault Configuring /dev and /devices NOTICE: Couldn't set value (../../sun/io/audio/sada/drv/audiocs/audio_4231.c, Line #1759 0x00 0x88) audio may not work correctly until it is stopped and restarted Segmentation Fault Using RPC Bootparams for network configuration information. Skipping interface le0 Searching for configuration file(s)... Search complete. .... What type of terminal are you using? 1) ANSI Standard CRT 2) DEC VT52 3) DEC VT100 4) Heathkit 19 5) Lear Siegler ADM31 6) PC Console 7) Sun Command Tool 8) Sun Workstation 9) Televideo 910 10) Televideo 925 11) Wyse Model 50 12) X Terminal Emulator (xterms) 13) CDE Terminal Emulator (dtterm) 14) Other Type the number of your choice and press Return: 3 syslog service starting. savecore: no dump device configured Running in command line mode /sbin/disk0_install[109]: 143 Segmentation Fault /sbin/run_install[130]: 155 Segmentation Fault To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1588328/+subscriptions