[Bug 1890155] [NEW] Abort in vmxnet3_validate_interrupt_idx

[Alexander Bulekov]

Public bug reported:

Hello,
Reproducer:

cat << EOF | ./i386-softmmu/qemu-system-i386 \
-device vmxnet3 -m 64 -nodefaults -qtest stdio -nographic
outl 0xcf8 0x80001014
outl 0xcfc 0xe0001000
outl 0xcf8 0x80001018
outl 0xcf8 0x80001004
outw 0xcfc 0x7
write 0x0 0x1 0xe1
write 0x1 0x1 0xfe
write 0x2 0x1 0xbe
write 0x3 0x1 0xba
write 0x52 0x1 0x61
writeq 0xe0001020 0xef0bff5ecafe0000
EOF

==============================================================
 #7 0x55b271a89b67 in hw_error 
/home/alxndr/Development/qemu/general-fuzz/softmmu/cpus.c:927:5
 #8 0x55b272fc6433 in vmxnet3_validate_interrupt_idx 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1355:9
 #9 0x55b272fc4e6d in vmxnet3_validate_interrupts 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1364:5
 #10 0x55b272fbe723 in vmxnet3_activate_device 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1546:5
 #11 0x55b272fb6fba in vmxnet3_handle_command 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1576:9
 #12 0x55b272fb410f in vmxnet3_io_bar1_write 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1772:9
 #13 0x55b271ac4193 in memory_region_write_accessor 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:483:5
 #14 0x55b271ac3637 in access_with_adjusted_size 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:544:18
 #15 0x55b271ac1256 in memory_region_dispatch_write 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:1466:16
 #16 0x55b270e724a6 in flatview_write_continue 
/home/alxndr/Development/qemu/general-fuzz/exec.c:3176:23
 #17 0x55b270e5acc6 in flatview_write 
/home/alxndr/Development/qemu/general-fuzz/exec.c:3216:14


qemu: hardware error: Bad interrupt index: 97
Aborted

-Alex

** Affects: qemu
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1890155

Title:
  Abort in vmxnet3_validate_interrupt_idx

Status in QEMU:
  New

Bug description:
  Hello,
  Reproducer:

  cat << EOF | ./i386-softmmu/qemu-system-i386 \
  -device vmxnet3 -m 64 -nodefaults -qtest stdio -nographic
  outl 0xcf8 0x80001014
  outl 0xcfc 0xe0001000
  outl 0xcf8 0x80001018
  outl 0xcf8 0x80001004
  outw 0xcfc 0x7
  write 0x0 0x1 0xe1
  write 0x1 0x1 0xfe
  write 0x2 0x1 0xbe
  write 0x3 0x1 0xba
  write 0x52 0x1 0x61
  writeq 0xe0001020 0xef0bff5ecafe0000
  EOF

  ==============================================================
   #7 0x55b271a89b67 in hw_error 
/home/alxndr/Development/qemu/general-fuzz/softmmu/cpus.c:927:5
   #8 0x55b272fc6433 in vmxnet3_validate_interrupt_idx 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1355:9
   #9 0x55b272fc4e6d in vmxnet3_validate_interrupts 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1364:5
   #10 0x55b272fbe723 in vmxnet3_activate_device 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1546:5
   #11 0x55b272fb6fba in vmxnet3_handle_command 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1576:9
   #12 0x55b272fb410f in vmxnet3_io_bar1_write 
/home/alxndr/Development/qemu/general-fuzz/hw/net/vmxnet3.c:1772:9
   #13 0x55b271ac4193 in memory_region_write_accessor 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:483:5
   #14 0x55b271ac3637 in access_with_adjusted_size 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:544:18
   #15 0x55b271ac1256 in memory_region_dispatch_write 
/home/alxndr/Development/qemu/general-fuzz/softmmu/memory.c:1466:16
   #16 0x55b270e724a6 in flatview_write_continue 
/home/alxndr/Development/qemu/general-fuzz/exec.c:3176:23
   #17 0x55b270e5acc6 in flatview_write 
/home/alxndr/Development/qemu/general-fuzz/exec.c:3216:14

  
  qemu: hardware error: Bad interrupt index: 97
  Aborted

  -Alex

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1890155/+subscriptions