Version 1 was posted back in July 2018. Oops. ;-) https://lists.gnu.org/archive/html/qemu-devel/2018-07/msg05788.html
--- v1 cover letter There are at least 4 separate bugs preventing clone from working. (1) cpu_copy left both cpus sharing the same register window (!) (2) cpu_clone_regs did not initialize %o1, so the new thread path in the guest __clone was always taken, even for the parent (old %o1 value was newsp, and so non-zero). (3) cpu_clone_regs did not advance the pc past the syscall in the child, which meant that the child re-executed the syscall (and because of (1), with essentially random inputs). (4) clone did not flush register windows, which would cause the parent stack to be clobbered by the child writing out old windows in order to allocate a new one. This is enough for Alex's atomic-test to make progress, but not quite enough for it to actually work. What I'm seeing now is a legitimate SEGV for a write to a r-xp memory segment. I'll need to examine the testcase further to see why that is happening. --- I have now traced the remaining problem to cpu_clone_regs putting the newsp into the frame pointer, not the stack pointer. In fixing this, I define a set of WREG_* constants in target/sparc/cpu.h, and then go on to fix some related problems in linux-user/sparc/signal.c. r~ Richard Henderson (8): linux-user: Disallow setting newsp for fork linux-user: Pass the parent env to cpu_clone_regs target/sparc: Define an enumeration for accessing env->regwptr linux-user/sparc: Use WREG constants in sparc/target_cpu.h linux-user/sparc: Use WREG constants in sparc/signal.c linux-user/sparc: Fix cpu_clone_regs linux-user/sparc: Flush register windows before clone scripts/qemu-binfmt-conf: Update for sparc64 linux-user/aarch64/target_cpu.h | 3 +- linux-user/alpha/target_cpu.h | 3 +- linux-user/arm/target_cpu.h | 3 +- linux-user/cris/target_cpu.h | 3 +- linux-user/hppa/target_cpu.h | 3 +- linux-user/i386/target_cpu.h | 3 +- linux-user/m68k/target_cpu.h | 3 +- linux-user/microblaze/target_cpu.h | 3 +- linux-user/mips/target_cpu.h | 3 +- linux-user/nios2/target_cpu.h | 3 +- linux-user/openrisc/target_cpu.h | 4 +- linux-user/ppc/target_cpu.h | 3 +- linux-user/riscv/target_cpu.h | 3 +- linux-user/s390x/target_cpu.h | 3 +- linux-user/sh4/target_cpu.h | 3 +- linux-user/sparc/target_cpu.h | 41 ++++++++----- linux-user/tilegx/target_cpu.h | 3 +- linux-user/xtensa/target_cpu.h | 3 +- target/sparc/cpu.h | 33 ++++++++++ linux-user/sparc/cpu_loop.c | 3 + linux-user/sparc/signal.c | 96 ++++++++++-------------------- linux-user/syscall.c | 9 ++- scripts/qemu-binfmt-conf.sh | 8 ++- 23 files changed, 141 insertions(+), 101 deletions(-) -- 2.17.1