Hi! Thanks for your reply.
I read the IA32 manual just now and indeed the patch is not correct. Is there any related patch for this bug? Ziqiao On Fri, Apr 2, 2021 at 4:45 PM Paolo Bonzini <pbonz...@redhat.com> wrote: > > On 02/04/21 10:29, Ziqiao Kong wrote: > > > > According to git blame, this bug is introduced about 13 years ago: > > https://github.com/qemu/qemu/blame/633decd71119a4293e5e53e6059026c517a8bef0/target-i386/fpu_helper.c#L997. > > > > We also had a patch for this bug: > > https://github.com/unicorn-engine/unicorn/commit/59b09a71bfc6fd8b95357944f6be9aa54f424421 > > which you may refer to. I can also help draft a patch if necessary. > > Hi! > > Unfortunately the patch is incorrect, because fpu_update_ip is called > only at translation time and not at run-time. If more than one x87 > instruction is present in the same translation block, or if a > translation block has been compiled after the one that is executing, > env->fpip will be incorrect. > > Thanks, > > Paolo >