Fix has been released with QEMU 2.11:
https://git.qemu.org/?p=qemu.git;a=commitdiff;h=d470ad42acfc73c45d3e8e
** Changed in: qemu
Status: New => Fix Released
--
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1728660
Title:
qemu-io segfaults at block/io.c:2545
Status in QEMU:
Fix Released
Bug description:
git is at HEAD a93ece47fd9edbd4558db24300056c9a57d3bcd4
This is on ppc64le architecture.
Re-production steps:
1. Copy the attached file named test.img to a directory
2. And customize the following command to point to the above directory and
run the same.
# mv test.img copy.img
# qemu-io <path to>/copy.img -c "discard 108544 97792"
from gdb:
Program terminated with signal 11, Segmentation fault.
#0 0x00000000100af254 in bdrv_co_pdiscard (bs=0x3ee89ad0, offset=196608,
bytes=9728) at block/io.c:2545
2545 if (bs->drv->bdrv_co_pdiscard) {
Missing separate debuginfos, use: debuginfo-install
cyrus-sasl-lib-2.1.26-21.el7.ppc64le glib2-2.50.3-3.el7.ppc64le
glibc-2.17-196.el7.ppc64le gmp-6.0.0-15.el7.ppc64le gnutls-3.3.26-9.el7.ppc64le
keyutils-libs-1.5.8-3.el7.ppc64le krb5-libs-1.15.1-8.el7.ppc64le
libaio-0.3.109-13.el7.ppc64le libcom_err-1.42.9-10.el7.ppc64le
libcurl-7.29.0-42.el7.ppc64le libffi-3.0.13-18.el7.ppc64le
libgcc-4.8.5-16.el7_4.1.ppc64le libidn-1.28-4.el7.ppc64le
libselinux-2.5-11.el7.ppc64le libssh2-1.4.3-10.el7_2.1.ppc64le
libstdc++-4.8.5-16.el7_4.1.ppc64le libtasn1-4.10-1.el7.ppc64le
nettle-2.7.1-8.el7.ppc64le nspr-4.13.1-1.0.el7_3.ppc64le
nss-3.28.4-15.el7_4.ppc64le nss-softokn-freebl-3.28.3-8.el7_4.ppc64le
nss-util-3.28.4-3.el7.ppc64le openldap-2.4.44-5.el7.ppc64le
openssl-libs-1.0.2k-8.el7.ppc64le p11-kit-0.23.5-3.el7.ppc64le
pcre-8.32-17.el7.ppc64le zlib-1.2.7-17.el7.ppc64le
(gdb) bt
#0 0x00000000100af254 in bdrv_co_pdiscard (bs=0x3ee89ad0, offset=196608,
bytes=9728) at block/io.c:2545
#1 0x000000001008f260 in blk_co_pdiscard (blk=0x3ee79410, offset=108544,
bytes=97792) at block/block-backend.c:1447
#2 0x0000000010090884 in blk_pdiscard_entry (opaque=0x3fffd7402c58) at
block/block-backend.c:1851
#3 0x00000000101aa444 in coroutine_trampoline (i0=1055521728, i1=0) at
util/coroutine-ucontext.c:79
#4 0x00003fff7a3d2b9c in makecontext () from /lib64/libc.so.6
#5 0x0000000000000000 in ?? ()
(gdb) bt full
#0 0x00000000100af254 in bdrv_co_pdiscard (bs=0x3ee89ad0, offset=196608,
bytes=9728) at block/io.c:2545
num = 9728
req = {bs = 0x3ee89ad0, offset = 108544, bytes = 97792, type =
BDRV_TRACKED_DISCARD, serialising = false, overlap_offset = 108544,
overlap_bytes = 97792, list = {le_next = 0x0, le_prev =
0x3ee8cd48}, co = 0x3ee9fbc0, wait_queue = {entries = {sqh_first = 0x0,
sqh_last = 0x3fff7823fe10}}, waiting_for = 0x0}
max_pdiscard = 2147467264
ret = 0
head = 0
tail = 9728
align = 16384
__PRETTY_FUNCTION__ = "bdrv_co_pdiscard"
#1 0x000000001008f260 in blk_co_pdiscard (blk=0x3ee79410, offset=108544,
bytes=97792) at block/block-backend.c:1447
ret = 0
#2 0x0000000010090884 in blk_pdiscard_entry (opaque=0x3fffd7402c58) at
block/block-backend.c:1851
rwco = 0x3fffd7402c58
#3 0x00000000101aa444 in coroutine_trampoline (i0=1055521728, i1=0) at
util/coroutine-ucontext.c:79
arg = {p = 0x3ee9fbc0, i = {1055521728, 0}}
self = 0x3ee9fbc0
co = 0x3ee9fbc0
#4 0x00003fff7a3d2b9c in makecontext () from /lib64/libc.so.6
No symbol table info available.
#5 0x0000000000000000 in ?? ()
No symbol table info available.
To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1728660/+subscriptions
