This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-bugs] [Bug 574] New: qemu pcnet emulation race causes data corrupti

To: xen-bugs@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-bugs] [Bug 574] New: qemu pcnet emulation race causes data corruption
From: bugzilla-daemon@xxxxxxxxxxxxxxxxxxx
Date: Fri, 17 Mar 2006 00:13:26 +0000
Delivery-date: Fri, 17 Mar 2006 00:14:59 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-bugs-request@lists.xensource.com?subject=help>
List-id: Xen Bugzilla <xen-bugs.lists.xensource.com>
List-post: <mailto:xen-bugs@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-bugs>, <mailto:xen-bugs-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-bugs>, <mailto:xen-bugs-request@lists.xensource.com?subject=unsubscribe>
Reply-to: bugs@xxxxxxxxxxxxxxxxxx
Sender: xen-bugs-bounces@xxxxxxxxxxxxxxxxxxx

           Summary: qemu pcnet emulation race causes data corruption
           Product: Xen
           Version: unstable
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Tools
        AssignedTo: xen-bugs@xxxxxxxxxxxxxxxxxxx
        ReportedBy: brazilnut@xxxxxxxxxx
                CC: niv@xxxxxxxxxx

The qemu pcnet hardware emulation violates the hardware interface by writing the
transmit and receive descriptors as a serial block of 16 bytes.  The second
word, tmd1 or rmd1, must be the first part of the descriptor read and the last
part written when updating the descriptor.  Otherwise the address read may be
stale, or the status seen by the driver may be stale.

This race is occasionally hit (30-50%) when transferring a large file from
another system, through dom0 to domU, when domU uses the pcnet32 driver. 
Possibly due to timing synchronization I can not get this to occur when going
from dom0 to domU alone.  The network asynchronous nature seems to be required
to hit this race.

Configure bugmail: 
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Xen-bugs mailing list

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-bugs] [Bug 574] New: qemu pcnet emulation race causes data corruption, bugzilla-daemon <=