disco is dead (tomorrow), marking wontfix for disco. ** Description changed:
[Impact] QEMU crashes when passing through 8 GPU devices on an AMD Rome-based system which is configured (via BIOS) as a single NUMA domain. [Test Case] [Fix] + the index into the bitmap array of batch_notify_vqs incremented itself + by BITS_PER_LONG but then incorrectly indexed the unsigned long bitmap + array by the full index value; when the number of vqs was under + BITS_PER_LONG, the index was always 0, but once the number of vqs + increased over BITS_PER_LONG, the bitmap array was indexed with (e.g. + using BITS_PER_LONG == 64) bitmap[64] instead of bitmap[1]. Fix it to + use the proper index by dividing the index counter by BITS_PER_LONG to + get the bitmap array index. + [Regression Risk] + + as this changes/fixes the index into an array, regressions would likely + occur around notifications to the guest about virtio-blk device updates, + or out-of-bounds errors in qemu itself, causing crash. + + [Scope] + + This is needed in b/e/f. + + This bug was introduced by commit + e21737ab150c2742dd94089017db96c472dd4b87 which was introduced in version + 2.7.0, so this bug does not exist in Xenial or earlier. + + This is fixed by commit 725fe5d10dbd4259b1853b7d253cef83a3c0d22a which + is not yet in focal. ** Description changed: [Impact] QEMU crashes when passing through 8 GPU devices on an AMD Rome-based system which is configured (via BIOS) as a single NUMA domain. [Test Case] [Fix] the index into the bitmap array of batch_notify_vqs incremented itself by BITS_PER_LONG but then incorrectly indexed the unsigned long bitmap array by the full index value; when the number of vqs was under BITS_PER_LONG, the index was always 0, but once the number of vqs increased over BITS_PER_LONG, the bitmap array was indexed with (e.g. using BITS_PER_LONG == 64) bitmap[64] instead of bitmap[1]. Fix it to use the proper index by dividing the index counter by BITS_PER_LONG to get the bitmap array index. [Regression Risk] as this changes/fixes the index into an array, regressions would likely occur around notifications to the guest about virtio-blk device updates, or out-of-bounds errors in qemu itself, causing crash. [Scope] This is needed in b/e/f. This bug was introduced by commit e21737ab150c2742dd94089017db96c472dd4b87 which was introduced in version 2.7.0, so this bug does not exist in Xenial or earlier. This is fixed by commit 725fe5d10dbd4259b1853b7d253cef83a3c0d22a which - is not yet in focal. + is not yet in focal, but per comment 3 is included in the pending MR for + focal. ** Changed in: qemu (Ubuntu Disco) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1859527 Title: vring_get_region_caches: Assertion `caches != NULL' failed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1859527/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs