[panda-users] about asidstory plugin

[xiaojuan Li]

Hi,
I tried the asidstory plugin: -replay ******* -panda 'asidstory'
and then segfault:
************************************************************************************
adding
/home/shentanli/pandanew/qemu/arm-softmmu/panda_plugins/panda_asidstory.so
to panda_plugin_files 0
emulator: registered 'boot-properties' qemud service
emulator: Adding boot property: 'dalvik.vm.heapsize' = '48m'
emulator: Adding boot property: 'qemu.sf.fake_camera' = 'both'
emulator: Adding boot property: 'qemu.hw.mainkeys' = '0'
loading
/home/shentanli/pandanew/qemu/arm-softmmu/panda_plugins/panda_asidstory.so
Initializing plugin asidstory
panda_require: osi
loading /home/shentanli/pandanew/qemu/arm-softmmu/panda_plugins/panda_osi.so
Success
Success
goldfish_add_device: goldfish_device_bus, base ff001000 1000, irq 1 1
goldfish_device_bus: ff001000     30
goldfish_add_device: goldfish_int, base ff000000 1000, irq 0 0
goldfish_int: ff000000     38
goldfish_add_device: goldfish_timer, base ff003000 1000, irq 3 1
goldfish_timer: ff003000     40
goldfish_add_device: goldfish_rtc, base ff010000 1000, irq 10 1
goldfish_rtc: ff010000     48
goldfish_add_device: goldfish_tty, base ff002000 1000, irq 4 1
goldfish_tty: ff002000     50
android_arm_init serial 1 0
android_arm_init serial 2 0
android_arm_init serial 3 0
goldfish_add_device: smc91x, base ff011000 1000, irq 11 1
goldfish_add_device: goldfish_fb, base ff012000 1000, irq 12 1
goldfish_fb: ff012000     68
Using tmpfile for SD card: /tmp/android-shentanli/emulator-pQEpMo
goldfish_add_device: goldfish_mmc, base ff005000 1000, irq 13 1
goldfish_mmc: ff005000     70
goldfish_add_device: goldfish_memlog, base ff006000 1000, irq 0 0
goldfish_memlog: ff006000     78
goldfish_add_device: goldfish-battery, base ff013000 1000, irq 14 1
goldfish-battery: ff013000     80
goldfish_add_device: goldfish_events, base ff014000 1000, irq 15 1
goldfish_events: ff014000     88
Using event IRQ
Invalid system partition size for non-QCOW image: 0emulator: geometry says
there are 0 blocks

emulator: Dev size of /tmp/android-shentanli/emulator-U4lzIR is 0

Invalid data partition size for non-QCOW image: 0emulator: Dev size 0x0
came from argument

emulator: geometry says there are 0 blocks

emulator: Dev size of /tmp/android-shentanli/emulator-DAYKEk is 0

emulator: Dev size 0x0 came from argument

emulator: geometry says there are 0 blocks

emulator: Dev size of /tmp/android-shentanli/emulator-KUsYAN is 0

goldfish_add_device: goldfish_nand, base ff015000 1000, irq 16 1
goldfish_nand: ff015000     90
goldfish_add_device: qemu_pipe, base ff016000 2000, irq 17 1
qemu_pipe: ff016000     98
emulator: control console listening on port 5554, ADB on port 5555
emulator: can't connect to ADB server: Connection refused
emulator: Realistic sensor emulation is not available, since the remote
controller is not accessible:
 Connection refused
loading snapshot
emulator: Adding boot property: 'dalvik.vm.heapsize' = '48m'
emulator: Adding boot property: 'qemu.sf.fake_camera' = 'both'
emulator: Adding boot property: 'qemu.hw.mainkeys' = '0'
... done.

Logging all cpu states
CPU #0:
R00=0000002f R01=a7d24020 R02=b6ee030c R03=b5312114
R04=a7bd4908 R05=a7d240a0 R06=a7bd4800 R07=000000c5
R08=b6f13d94 R09=a7d240dc R10=00000000 R11=aefc7980
R12=a7bd4818 R13=c1ba5ff8 R14=b6ee0318 R15=ffff0008
PSR=40000093 -Z-- A svc32
opening nondet log for read :    ./read-256-smaller-rr-nondet.log
Segmentation fault (core dumped)
*************************************************************************************

and then gdb find this:
---------------------------------------------------------------------------------------------------------
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `./qemu-system-arm -m 256 -replay read-256-smaller -M
android_arm -kernel /dev/n'.
Program terminated with signal 11, Segmentation fault.
#0  asidstory_before_block_exec (env=<optimized out>, tb=<optimized out>)
    at asidstory.cpp:207
207        if (pid_ok(p->pid)) {
(gdb) print p->pid
$1 = 0
----------------------------------------------------------------------------------------------------------
the func pid_ok just allows pid>=4 but why?
[image: 内嵌图片 1]

could you spare some time to check this plugin?
Thanks!

-- 
wait and hope~~
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/panda-users/attachments/20150422/38885e37/attachment.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: asidtory.png
Type: image/png
Size: 4134 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20150422/38885e37/attachment.png