VM cannot use more than 2-3 GB of memory when the seabios patched by kvm-qemu.sh is used

[seanthegeek]

I think I've finally figured out the root cause of my VMs crashing - and why it didn't happen consistently when I changed different things to troubleshoot the issue - the guest OS does not see enough RAM.

The host has 64 GB of RAM.

Windows 10 64 bit only sees 2 GB of RAM on a VM configured with a Q35 chipset and 4 GB of RAM.

Windows 7 64 bit only sees 3 GB of RAM on a VM configured with an i440FX chipset and current and maximum amount of RAM set to 4 GB.

This happens with or without the virtio balloon driver installed (I'd prefer it to not have any virtio drivers installed, to make it harder to identify the system as a VM.

I realize this isn't a CAPE issue, but I'm hoping someone here has some idea of what's going wrong, because even after lots of Googling, and updating the BIOS of the host system, I still haven't figured this out.

FWIW, I also posted on the KVM Subreddit.

Any idea what's going wrong?

[doomedraven]

that is always bios, do grep on your bios file + watch the command like of qemu when vm start https://www.reddit.com/r/qemu_kvm/comments/phsrw8/cant_use_more_than_3gb_ram_on_x64_win10/

[doomedraven]

im don't really like having not cape related problems in cape repo.

* Error:
        * VM can't use more than 2-3Gb of ram for x64 VM
* Solution:
        * Ensure that you not using default QEMU bios.bin, use next command to check, it shouldn't find coincidences
            * grep "prebuild.qemu.org" /usr/share/qemu/bios.bin

[seanthegeek]

@doomedraven No incidences from that grep command. I'm using the bios.bin built by the seabios command of the kvm-qemu.sh included with CAPE .

Now that you've pointed me in the direction of the BIOS though, I just tried using the default bios.bin and the VMs now show all 4 GB of RAM., so this does seem to be the opposite of what the help you quoted says .

By changing the smbios libvirt settings and adding the qemu:commandline element, like you mention in your blog post I can pass just as many of the phfish VM checks, So what is the point of the custom BIOS build?

[doomedraven]

1 software evolution maybe? They dropped al the antivm patterns 2 the point is to defeat all antivms, obviously we wont check each release of seabios 3 as my reddit says, in my case then it was the problem that the latest easnt working, but previous worked perfectly Welcome to software updates hell 🤣 El mié, 21 jun 2023, 3:13, Sean Whalen ***@***.***> escribió:

…

@doomedraven <https://github.com/doomedraven> No incidences from that grep command. I'm using the bios.bin built by the seabios command of the kvm-qemu.sh included with CAPE . Now that you've pointed me in the direction of the BIOS though, I just tried using the default bios.bin and the VMs now show all 4 GB of RAM., so this does seem to be the opposite of what the help you quoted says . By changing the smbios libvirt settings and adding the qemu:commandline element, like you mention in your blog post <https://www.doomedraven.com/2016/05/kvm.html#2-add-cpuid-bit-vm-detect-patching-and-acpi-tables> I can pass just as many of the phfish VM checks, So what is the point of the custom BIOS build? — Reply to this email directly, view it on GitHub <#1618 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAOFH35XEVB7EVYRS6DMB5DXMJDEHANCNFSM6AAAAAAZNT35HU> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[ClaudioWayne]

Hi,
If I remember correctly, i had a similar problem.
It was related to the antivm string replacement in replace_seabios_clues_public().
I think the replacement in src/fw/paravirt.c causes the problem.
Maybe you skip this file for testing or use a different replacement string (e.g. length of the string)

[doomedraven]

btw @seanthegeek forget about pafish, is past, use modern vm detection as al-khaser and you will understand why custom is build, i see all their VM patterns in there https://github.com/coreboot/seabios/blob/master/src/config.h#L12-L15

interesting point @ClaudioWayne, there should be something in the build log right?

[ClaudioWayne]

Yes could be. But it's been quite a long time since I've dealt with it.
Maybe I'm wrong, but it's worth a try.
I can not test it at the moment, because I am busy.
But i think the only replacement in paravirt.c is in these lines:

    // Detect fw_cfg interface.
    qemu_cfg_select(QEMU_CFG_SIGNATURE);
    char *sig = "QEMU";
    int i;
    for (i = 0; i < 4; i++)
        if (inb(PORT_QEMU_CFG_DATA) != sig[i])
            return 0;

PORT_QEMU_CFG_DATA is defined in paravirt.h

#define PORT_QEMU_CFG_DATA 0x0511

I do not have much experience in this field, but if its really related to paravirt.c we maybe could ignore the for-loop check and use the 4 char string from the installer script anyway. I'm not sure what the syscall inb for Port 0x0511 returns. But if it is also "QEMU", that should also be patched somehow.

[seanthegeek]

there should be something in the build log right?

I don't see anything odd.

seabios-build-log.txt

[doomedraven]

Then get a previous version of seabios. Is what happend to me and is whatvi mentioned in that reddit El mié, 21 jun 2023, 23:55, Sean Whalen ***@***.***> escribió:

…

there should be something in the build log right? I don't see anything odd. seabios-build-log.txt <https://github.com/kevoreilly/CAPEv2/files/11826536/seabios-build-log.txt> — Reply to this email directly, view it on GitHub <#1618 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAOFH37Z7ESBBLKRLNFH2L3XMNUTPANCNFSM6AAAAAAZNT35HU> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[ClaudioWayne]

I don't see anything odd.

Have you tried if you can allocate more memory if you don't patch paravirt.c? The user in this issue (doomedraven/Tools#132 (comment)) was able to allocate more memory when he ignored paravirt.c

[seanthegeek]

@ClaudioWayne Yes. I just tried skipping patching paravirt.c, and the system can use all 4 GB of RAM I allocated to it. Hopefully that helps narrow down the problem.

@doomedraven I just tried with seabios 1.14.0, and it had the same problem. I'd rather not use a very old version of seabios. I want to avoid any unpatched vulnerabilities that might be leveraged for a VM escape.

When I tried to build seabios 1.13.0, I got a linking error

[+] Generating SeaBios Kconfig
[+] Fixing SeaBios antivms
scripts/kconfig/conf --olddefconfig /tmp/seabios/src/Kconfig
#
# configuration written to /tmp/seabios/.config
#
  Compiling to assembler out/src/asm-offsets.s
  Build Kconfig config file
  Compile checking out/src/misc.o
  Compile checking out/src/stacks.o
  Compile checking out/src/output.o
  Compile checking out/src/string.o
  Compile checking out/src/block.o
  Compile checking out/src/cdrom.o
  Compile checking out/src/disk.o
  Compile checking out/src/mouse.o
  Compile checking out/src/kbd.o
  Compile checking out/src/system.o
  Compile checking out/src/serial.o
  Compile checking out/src/sercon.o
  Compile checking out/src/clock.o
  Compile checking out/src/resume.o
  Compile checking out/src/pnpbios.o
  Compile checking out/src/vgahooks.o
  Compile checking out/src/pcibios.o
  Compile checking out/src/apm.o
  Compile checking out/src/cp437.o
  Compile checking out/src/hw/pci.o
  Compile checking out/src/hw/timer.o
  Compile checking out/src/hw/rtc.o
  Compile checking out/src/hw/dma.o
  Compile checking out/src/hw/pic.o
  Compile checking out/src/hw/ps2port.o
  Compile checking out/src/hw/serialio.o
  Compile checking out/src/hw/usb.o
  Compile checking out/src/hw/usb-uhci.o
  Compile checking out/src/hw/usb-ohci.o
  Compile checking out/src/hw/usb-ehci.o
  Compile checking out/src/hw/usb-hid.o
  Compile checking out/src/hw/usb-msc.o
  Compile checking out/src/hw/usb-uas.o
  Compile checking out/src/hw/blockcmd.o
  Compile checking out/src/hw/floppy.o
  Compile checking out/src/hw/ata.o
  Compile checking out/src/hw/ramdisk.o
  Compile checking out/src/hw/lsi-scsi.o
  Compile checking out/src/hw/esp-scsi.o
  Compile checking out/src/hw/megasas.o
  Compile checking out/src/hw/mpt-scsi.o
  Compile checking out/src/post.o
  Compile checking out/src/e820map.o
  Compile checking out/src/malloc.o
  Compile checking out/src/romfile.o
  Compile checking out/src/x86.o
  Compile checking out/src/optionroms.o
  Compile checking out/src/pmm.o
  Compile checking out/src/font.o
  Compile checking out/src/boot.o
  Compile checking out/src/bootsplash.o
  Compile checking out/src/jpeg.o
  Compile checking out/src/bmp.o
  Compile checking out/src/tcgbios.o
  Compile checking out/src/sha1.o
  Compile checking out/src/hw/pcidevice.o
  Compile checking out/src/hw/ahci.o
  Compile checking out/src/hw/pvscsi.o
  Compile checking out/src/hw/usb-xhci.o
  Compile checking out/src/hw/usb-hub.o
  Compile checking out/src/hw/sdcard.o
  Compile checking out/src/fw/coreboot.o
  Compile checking out/src/fw/lzmadecode.o
  Compile checking out/src/fw/multiboot.o
  Compile checking out/src/fw/csm.o
  Compile checking out/src/fw/biostables.o
  Compile checking out/src/fw/paravirt.o
  Compile checking out/src/fw/shadow.o
  Compile checking out/src/fw/pciinit.o
  Compile checking out/src/fw/smm.o
  Compile checking out/src/fw/smp.o
  Compile checking out/src/fw/mtrr.o
  Compile checking out/src/fw/xen.o
  Compile checking out/src/fw/acpi.o
  Compile checking out/src/fw/mptable.o
  Compile checking out/src/fw/pirtable.o
  Compile checking out/src/fw/smbios.o
  Compile checking out/src/fw/romfile_loader.o
  Compile checking out/src/hw/virtio-ring.o
  Compile checking out/src/hw/virtio-pci.o
  Compile checking out/src/hw/virtio-blk.o
  Compile checking out/src/hw/virtio-scsi.o
  Compile checking out/src/hw/tpm_drivers.o
  Compile checking out/src/hw/nvme.o
  Compiling whole program out/code32seg.o
  Generating offset file out/asm-offsets.h
  Compiling whole program out/ccode16.o
  Compiling (16bit) out/romlayout.o
  Compiling whole program out/ccode32flat.o
  Building ld scripts
  Compiling IASL src/fw/acpi-dsdt.hex
make[1]: warning: jobserver unavailable: using -j1.  Add '+' to parent make rule.
  Compiling IASL src/fw/ssdt-proc.hex
  Build Kconfig config file
  Compiling IASL src/fw/ssdt-misc.hex
  Compiling IASL src/fw/ssdt-pcihp.hex
  Compile checking out/src/misc.o
  Compile checking out/src/stacks.o
  Compile checking out/src/output.o
  Compile checking out/src/string.o
  Compile checking out/src/block.o
  Compile checking out/src/cdrom.o
  Compile checking out/src/disk.o
  Compile checking out/src/mouse.o
  Compile checking out/src/kbd.o
  Compile checking out/src/system.o
  Compile checking out/src/serial.o
  Compile checking out/src/sercon.o
  Compile checking out/src/clock.o
  Compile checking out/src/resume.o
  Compile checking out/src/pnpbios.o
  Compile checking out/src/vgahooks.o
  Compile checking out/src/pcibios.o
  Compile checking out/src/apm.o
  Compile checking out/src/cp437.o
  Compile checking out/src/hw/pci.o
out/src/fw/ssdt-proc.dsl.i     15:     Proce  Compile checking out/src/hw/timer.o
ssor(CPAA, 0xAA, 0x0000b010, 0x06) {
Warning  3168 -                                    ^ Legacy Processor() keyword detected. Use Device() keyword instead.

ASL Input:     out/src/fw/ssdt-proc.dsl.i -     762 bytes      8 keywords     36 source lines
AML Output:    out/src/fw/ssdt-proc.aml -     162 bytes      2 opcodes       6 named objects
Listing File:  out/src/fw/ssdt-proc.lst -    3369 bytes
Hex Dump:      out/src/fw/ssdt-proc.hex -    1995 bytes

Compilation successful. 0 Errors, 1 Warnings, 0 Remarks, 0 Optimizations
ASL Input:     out/src/fw/ssdt-misc.dsl.i -    2565 bytes     35 keywords    102 source lines
AML Output:    out/src/fw/ssdt-misc.aml -     388 bytes     11 opcodes      24 named objects
Listing File:  out/src/fw/ssdt-misc.lst -    7622 bytes
Hex Dump:      out/src/fw/ssdt-misc.hex -    4096 bytes

Compilation successful. 0 Errors, 0 Warnings, 0 Remarks, 2 Optimizations
  Compile checking out/src/hw/rtc.o
ASL Input:     out/src/fw/ssdt-pcihp.dsl.i -     755 bytes      5 keywords     37 source lines
AML Output:    out/src/fw/ssdt-pcihp.aml -     121 bytes      0 opcodes       5 named objects
Listing File:  out/src/fw/ssdt-pcihp.lst -    2727 bytes
Hex Dump:      out/src/fw/ssdt-pcihp.hex -    1624 bytes

Compilation successful. 0 Errors, 0 Warnings, 0 Remarks, 0 Optimizations
  Compile checking out/src/hw/dma.o
out/src/fw/acpi-dsdt.dsl.i     31:         Device(PCI0) {
Warning  3073 -                      Multiple types ^  (Device object requires either a _HID or _ADR, but not both)

out/src/fw/acpi-dsdt.dsl.i    361:             Name(PRR0, ResourceTemplate() {
Remark   2173 -                                       ^ Creation of named objects within a method is highly inefficient, use globals or method local variables instead (\_SB.IQCR)

out/src/fw/acpi-dsdt.dsl.i    405:     Method(CPEJ, 2, NotSerialized) {
Remark   2146 -   Method Argument is never used ^  (Arg0)

out/src/fw/acpi-dsdt.dsl.i    405:     Method(CPEJ, 2, NotSerialized) {
Remark   2146 -   Method Argument is never used ^  (Arg1)

ASL Input:     out/src/fw/acpi-dsdt.dsl.i -   19153 bytes    315 keywords    475 source lines
AML Output:    out/src/fw/acpi-dsdt.aml -    4585 bytes    156 opcodes     159 named objects
Listing File:  out/src/fw/acpi-dsdt.lst -   67530 bytes
Hex Dump:      out/src/fw/acpi-dsdt.hex -   43472 bytes

Compilation successful. 0 Errors, 1 Warnings, 3 Remarks, 246 Optimizations
  Compile checking out/src/hw/pic.o
  Compile checking out/src/hw/ps2port.o
  Compile checking out/src/hw/serialio.o
  Compile checking out/src/hw/usb.o
  Compile checking out/src/hw/usb-uhci.o
  Compile checking out/src/hw/usb-ohci.o
  Compile checking out/src/hw/usb-ehci.o
  Compile checking out/src/hw/usb-hid.o
  Compile checking out/src/hw/usb-msc.o
  Compile checking out/src/hw/usb-uas.o
  Compile checking out/src/hw/blockcmd.o
  Compile checking out/src/hw/floppy.o
  Compile checking out/src/hw/ata.o
  Compile checking out/src/hw/ramdisk.o
  Compile checking out/src/hw/lsi-scsi.o
  Compile checking out/src/hw/esp-scsi.o
  Compile checking out/src/hw/megasas.o
  Compile checking out/src/hw/mpt-scsi.o
  Compile checking out/src/post.o
  Compile checking out/src/e820map.o
  Compile checking out/src/malloc.o
  Compile checking out/src/romfile.o
  Compile checking out/src/x86.o
  Compile checking out/src/optionroms.o
  Compile checking out/src/pmm.o
  Compile checking out/src/font.o
  Compile checking out/src/boot.o
  Compile checking out/src/bootsplash.o
  Compile checking out/src/jpeg.o
  Compile checking out/src/bmp.o
  Compile checking out/src/tcgbios.o
  Compile checking out/src/sha1.o
src/post.c: In function 'reloc_preinit':
src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds]
  248 |         *((u32*)(dest + *reloc)) += delta;
      |                                  ^~
In file included from src/biosvar.h:11,
                 from src/post.c:8:
src/post.c:278:26: note: while referencing 'code32flat_start'
  278 |     updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start)
      |                          ^~~~~~~~~~~~~~~~
src/memmap.h:18:36: note: in definition of macro 'SYMBOL'
   18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; })
      |                                    ^~~
src/post.c:278:18: note: in expansion of macro 'VSYMBOL'
  278 |     updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start)
      |                  ^~~~~~~
src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds]
  248 |         *((u32*)(dest + *reloc)) += delta;
      |         ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
In file included from src/biosvar.h:11,
                 from src/post.c:8:
src/post.c:278:26: note: while referencing 'code32flat_start'
  278 |     updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start)
      |                          ^~~~~~~~~~~~~~~~
src/memmap.h:18:36: note: in definition of macro 'SYMBOL'
   18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; })
      |                                    ^~~
src/post.c:278:18: note: in expansion of macro 'VSYMBOL'
  278 |     updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start)
      |                  ^~~~~~~
  Compile checking out/src/hw/pcidevice.o
  Compile checking out/src/hw/ahci.o
  Compile checking out/src/hw/pvscsi.o
  Compile checking out/src/hw/usb-xhci.o
  Compile checking out/src/hw/usb-hub.o
  Compile checking out/src/hw/sdcard.o
  Compile checking out/src/fw/coreboot.o
  Compile checking out/src/fw/lzmadecode.o
  Compile checking out/src/fw/multiboot.o
  Compile checking out/src/fw/csm.o
  Compile checking out/src/fw/biostables.o
  Compile checking out/src/fw/paravirt.o
  Compile checking out/src/fw/shadow.o
  Compile checking out/src/fw/pciinit.o
  Compile checking out/src/fw/smm.o
  Compile checking out/src/fw/smp.o
  Compile checking out/src/fw/mtrr.o
  Compile checking out/src/fw/xen.o
  Compile checking out/src/fw/acpi.o
  Compile checking out/src/fw/mptable.o
  Compile checking out/src/fw/pirtable.o
  Compile checking out/src/fw/smbios.o
  Compile checking out/src/fw/romfile_loader.o
  Compile checking out/src/hw/virtio-ring.o
  Compile checking out/src/hw/virtio-pci.o
src/tcgbios.c: In function 'tpm20_write_EfiSpecIdEventStruct':
src/tcgbios.c:290:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds]
  290 |         event.hdr.digestSizes[count].algorithmId = be16_to_cpu(sel->hashAlg);
      |         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~
In file included from src/tcgbios.c:22:
src/std/tcg.h:527:7: note: while referencing 'digestSizes'
  527 |     } digestSizes[0];
      |       ^~~~~~~~~~~
  Compile checking out/src/hw/virtio-blk.o
src/tcgbios.c:291:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds]
  291 |         event.hdr.digestSizes[count].digestSize = hsize;
      |         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~
In file included from src/tcgbios.c:22:
src/std/tcg.h:527:7: note: while referencing 'digestSizes'
  527 |     } digestSizes[0];
      |       ^~~~~~~~~~~
In file included from src/fw/mptable.c:17:
src/fw/mptable.c: In function 'mptable_setup':
src/string.h:23:16: warning: '__builtin_memcpy' forming offset 7 is out of the bounds [0, 7] [-Warray-bounds]
   23 | #define memcpy __builtin_memcpy
src/fw/mptable.c:38:5: note: in expansion of macro 'memcpy'
   38 |     memcpy(config->oemid, BUILD_CPUNAME8, sizeof(config->oemid));
      |     ^~~~~~
  Compile checking out/src/hw/virtio-scsi.o
  Compile checking out/src/hw/tpm_drivers.o
  Compile checking out/src/hw/nvme.o
  Compiling whole program out/code32seg.o
  Compiling (16bit) out/romlayout.o
  Compiling whole program out/ccode16.o
In file included from src/fw/acpi.c:21:
src/fw/acpi.c: In function 'build_header.constprop':
src/string.h:23:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds]
   23 | #define memcpy __builtin_memcpy
src/fw/acpi.c:33:5: note: in expansion of macro 'memcpy'
   33 |     memcpy(h->oem_id, BUILD_APPNAME6, 6);
      |     ^~~~~~
src/fw/acpi.c: In function 'acpi_setup':
src/string.h:23:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds]
   23 | #define memcpy __builtin_memcpy
src/fw/acpi.c:681:5: note: in expansion of macro 'memcpy'
  681 |     memcpy(rsdp.oem_id, BUILD_APPNAME6, 6);
      |     ^~~~~~
  Compiling whole program out/ccode32flat.o
In file included from out/ccode32flat.o.tmp.c:54:
./src/tcgbios.c: In function 'tpm20_write_EfiSpecIdEventStruct':
./src/tcgbios.c:290:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds]
  290 |         event.hdr.digestSizes[count].algorithmId = be16_to_cpu(sel->hashAlg);
      |         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~
In file included from ./src/tcgbios.c:22,
                 from out/ccode32flat.o.tmp.c:54:
./src/std/tcg.h:527:7: note: while referencing 'digestSizes'
  527 |     } digestSizes[0];
      |       ^~~~~~~~~~~
In file included from out/ccode32flat.o.tmp.c:54:
./src/tcgbios.c:291:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds]
  291 |         event.hdr.digestSizes[count].digestSize = hsize;
      |         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~
In file included from ./src/tcgbios.c:22,
                 from out/ccode32flat.o.tmp.c:54:
./src/std/tcg.h:527:7: note: while referencing 'digestSizes'
  527 |     } digestSizes[0];
      |       ^~~~~~~~~~~
In file included from out/ccode32flat.o.tmp.c:4:
./src/fw/acpi.c: In function 'build_header.constprop':
./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds]
  156 | #define memcpy __builtin_memcpy
./src/fw/acpi.c:33:5: note: in expansion of macro 'memcpy'
   33 |     memcpy(h->oem_id, BUILD_APPNAME6, 6);
      |     ^~~~~~
In function 'mptable_setup',
    inlined from 'qemu_platform_setup' at ./src/fw/paravirt.c:180:9:
./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 7 is out of the bounds [0, 7] [-Warray-bounds]
  156 | #define memcpy __builtin_memcpy
./src/fw/mptable.c:38:5: note: in expansion of macro 'memcpy'
   38 |     memcpy(config->oemid, BUILD_CPUNAME8, sizeof(config->oemid));
      |     ^~~~~~
In function 'acpi_setup',
    inlined from 'qemu_platform_setup' at ./src/fw/paravirt.c:204:5:
./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds]
  156 | #define memcpy __builtin_memcpy
./src/fw/acpi.c:681:5: note: in expansion of macro 'memcpy'
  681 |     memcpy(rsdp.oem_id, BUILD_APPNAME6, 6);
      |     ^~~~~~
In file included from out/ccode32flat.o.tmp.c:42:
./src/post.c: In function 'dopost':
./src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds]
  248 |         *((u32*)(dest + *reloc)) += delta;
      |                                  ^~
In file included from ./src/biosvar.h:11,
                 from ./src/misc.c:8,
                 from out/ccode32flat.o.tmp.c:1:
./src/fw/shadow.c:190:29: note: while referencing 'code32flat_start'
  190 |         u32 cstart = SYMBOL(code32flat_start), cend = SYMBOL(code32flat_end);
      |                             ^~~~~~~~~~~~~~~~
./src/memmap.h:18:36: note: in definition of macro 'SYMBOL'
   18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; })
      |                                    ^~~
In file included from out/ccode32flat.o.tmp.c:42:
./src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds]
  248 |         *((u32*)(dest + *reloc)) += delta;
      |         ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
In file included from ./src/biosvar.h:11,
                 from ./src/misc.c:8,
                 from out/ccode32flat.o.tmp.c:1:
./src/fw/shadow.c:190:29: note: while referencing 'code32flat_start'
  190 |         u32 cstart = SYMBOL(code32flat_start), cend = SYMBOL(code32flat_end);
      |                             ^~~~~~~~~~~~~~~~
./src/memmap.h:18:36: note: in definition of macro 'SYMBOL'
   18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; })
      |                                    ^~~
  Building ld scripts
Version: rel-1.13.0-0-gf21b5a4-dirty-20230626_175724-sandbox
Fixed space: 0xe05b-0x10000  total: 8101  slack: 11  Percent slack: 0.1%
16bit size:           37952
32bit segmented size: 2221
32bit flat size:      43667
32bit flat init size: 77760
Lowmem size:          2240
f-segment var size:   1248
  Linking out/rom16.o
  Linking out/rom32seg.o
  Stripping out/rom32seg.strip.o
  Stripping out/rom16.strip.o
  Linking out/rom.o
ld: cannot use executable file 'out/rom16.strip.o' as input to a link
make: *** [Makefile:187: out/rom.o] Error 1
[-] Bios compilation failed

[doomedraven]

Thanks for feedback, will see how to exclude that file El mar, 27 jun 2023, 0:06, Sean Whalen ***@***.***> escribió:

…

@ClaudioWayne <https://github.com/ClaudioWayne> Yes. I just tried skipping patching paravirt.c, and the system can use all 4 GB of RAM I allocated to it. Hopefully that helps narrow down the problem. @doomedraven <https://github.com/doomedraven> I just tried with seabios 1.14.0, and it had the same problem. I'd rather not use a very old version of seabios. I want to avoid any unpatched vulnerabilities that might be leveraged for a VM escape. When I tried to build seabios 1.13.0, I got a linking error [+] Generating SeaBios Kconfig [+] Fixing SeaBios antivms scripts/kconfig/conf --olddefconfig /tmp/seabios/src/Kconfig # # configuration written to /tmp/seabios/.config # Compiling to assembler out/src/asm-offsets.s Build Kconfig config file Compile checking out/src/misc.o Compile checking out/src/stacks.o Compile checking out/src/output.o Compile checking out/src/string.o Compile checking out/src/block.o Compile checking out/src/cdrom.o Compile checking out/src/disk.o Compile checking out/src/mouse.o Compile checking out/src/kbd.o Compile checking out/src/system.o Compile checking out/src/serial.o Compile checking out/src/sercon.o Compile checking out/src/clock.o Compile checking out/src/resume.o Compile checking out/src/pnpbios.o Compile checking out/src/vgahooks.o Compile checking out/src/pcibios.o Compile checking out/src/apm.o Compile checking out/src/cp437.o Compile checking out/src/hw/pci.o Compile checking out/src/hw/timer.o Compile checking out/src/hw/rtc.o Compile checking out/src/hw/dma.o Compile checking out/src/hw/pic.o Compile checking out/src/hw/ps2port.o Compile checking out/src/hw/serialio.o Compile checking out/src/hw/usb.o Compile checking out/src/hw/usb-uhci.o Compile checking out/src/hw/usb-ohci.o Compile checking out/src/hw/usb-ehci.o Compile checking out/src/hw/usb-hid.o Compile checking out/src/hw/usb-msc.o Compile checking out/src/hw/usb-uas.o Compile checking out/src/hw/blockcmd.o Compile checking out/src/hw/floppy.o Compile checking out/src/hw/ata.o Compile checking out/src/hw/ramdisk.o Compile checking out/src/hw/lsi-scsi.o Compile checking out/src/hw/esp-scsi.o Compile checking out/src/hw/megasas.o Compile checking out/src/hw/mpt-scsi.o Compile checking out/src/post.o Compile checking out/src/e820map.o Compile checking out/src/malloc.o Compile checking out/src/romfile.o Compile checking out/src/x86.o Compile checking out/src/optionroms.o Compile checking out/src/pmm.o Compile checking out/src/font.o Compile checking out/src/boot.o Compile checking out/src/bootsplash.o Compile checking out/src/jpeg.o Compile checking out/src/bmp.o Compile checking out/src/tcgbios.o Compile checking out/src/sha1.o Compile checking out/src/hw/pcidevice.o Compile checking out/src/hw/ahci.o Compile checking out/src/hw/pvscsi.o Compile checking out/src/hw/usb-xhci.o Compile checking out/src/hw/usb-hub.o Compile checking out/src/hw/sdcard.o Compile checking out/src/fw/coreboot.o Compile checking out/src/fw/lzmadecode.o Compile checking out/src/fw/multiboot.o Compile checking out/src/fw/csm.o Compile checking out/src/fw/biostables.o Compile checking out/src/fw/paravirt.o Compile checking out/src/fw/shadow.o Compile checking out/src/fw/pciinit.o Compile checking out/src/fw/smm.o Compile checking out/src/fw/smp.o Compile checking out/src/fw/mtrr.o Compile checking out/src/fw/xen.o Compile checking out/src/fw/acpi.o Compile checking out/src/fw/mptable.o Compile checking out/src/fw/pirtable.o Compile checking out/src/fw/smbios.o Compile checking out/src/fw/romfile_loader.o Compile checking out/src/hw/virtio-ring.o Compile checking out/src/hw/virtio-pci.o Compile checking out/src/hw/virtio-blk.o Compile checking out/src/hw/virtio-scsi.o Compile checking out/src/hw/tpm_drivers.o Compile checking out/src/hw/nvme.o Compiling whole program out/code32seg.o Generating offset file out/asm-offsets.h Compiling whole program out/ccode16.o Compiling (16bit) out/romlayout.o Compiling whole program out/ccode32flat.o Building ld scripts Compiling IASL src/fw/acpi-dsdt.hex make[1]: warning: jobserver unavailable: using -j1. Add '+' to parent make rule. Compiling IASL src/fw/ssdt-proc.hex Build Kconfig config file Compiling IASL src/fw/ssdt-misc.hex Compiling IASL src/fw/ssdt-pcihp.hex Compile checking out/src/misc.o Compile checking out/src/stacks.o Compile checking out/src/output.o Compile checking out/src/string.o Compile checking out/src/block.o Compile checking out/src/cdrom.o Compile checking out/src/disk.o Compile checking out/src/mouse.o Compile checking out/src/kbd.o Compile checking out/src/system.o Compile checking out/src/serial.o Compile checking out/src/sercon.o Compile checking out/src/clock.o Compile checking out/src/resume.o Compile checking out/src/pnpbios.o Compile checking out/src/vgahooks.o Compile checking out/src/pcibios.o Compile checking out/src/apm.o Compile checking out/src/cp437.o Compile checking out/src/hw/pci.o out/src/fw/ssdt-proc.dsl.i 15: Proce Compile checking out/src/hw/timer.o ssor(CPAA, 0xAA, 0x0000b010, 0x06) { Warning 3168 - ^ Legacy Processor() keyword detected. Use Device() keyword instead. ASL Input: out/src/fw/ssdt-proc.dsl.i - 762 bytes 8 keywords 36 source lines AML Output: out/src/fw/ssdt-proc.aml - 162 bytes 2 opcodes 6 named objects Listing File: out/src/fw/ssdt-proc.lst - 3369 bytes Hex Dump: out/src/fw/ssdt-proc.hex - 1995 bytes Compilation successful. 0 Errors, 1 Warnings, 0 Remarks, 0 Optimizations ASL Input: out/src/fw/ssdt-misc.dsl.i - 2565 bytes 35 keywords 102 source lines AML Output: out/src/fw/ssdt-misc.aml - 388 bytes 11 opcodes 24 named objects Listing File: out/src/fw/ssdt-misc.lst - 7622 bytes Hex Dump: out/src/fw/ssdt-misc.hex - 4096 bytes Compilation successful. 0 Errors, 0 Warnings, 0 Remarks, 2 Optimizations Compile checking out/src/hw/rtc.o ASL Input: out/src/fw/ssdt-pcihp.dsl.i - 755 bytes 5 keywords 37 source lines AML Output: out/src/fw/ssdt-pcihp.aml - 121 bytes 0 opcodes 5 named objects Listing File: out/src/fw/ssdt-pcihp.lst - 2727 bytes Hex Dump: out/src/fw/ssdt-pcihp.hex - 1624 bytes Compilation successful. 0 Errors, 0 Warnings, 0 Remarks, 0 Optimizations Compile checking out/src/hw/dma.o out/src/fw/acpi-dsdt.dsl.i 31: Device(PCI0) { Warning 3073 - Multiple types ^ (Device object requires either a _HID or _ADR, but not both) out/src/fw/acpi-dsdt.dsl.i 361: Name(PRR0, ResourceTemplate() { Remark 2173 - ^ Creation of named objects within a method is highly inefficient, use globals or method local variables instead (\_SB.IQCR) out/src/fw/acpi-dsdt.dsl.i 405: Method(CPEJ, 2, NotSerialized) { Remark 2146 - Method Argument is never used ^ (Arg0) out/src/fw/acpi-dsdt.dsl.i 405: Method(CPEJ, 2, NotSerialized) { Remark 2146 - Method Argument is never used ^ (Arg1) ASL Input: out/src/fw/acpi-dsdt.dsl.i - 19153 bytes 315 keywords 475 source lines AML Output: out/src/fw/acpi-dsdt.aml - 4585 bytes 156 opcodes 159 named objects Listing File: out/src/fw/acpi-dsdt.lst - 67530 bytes Hex Dump: out/src/fw/acpi-dsdt.hex - 43472 bytes Compilation successful. 0 Errors, 1 Warnings, 3 Remarks, 246 Optimizations Compile checking out/src/hw/pic.o Compile checking out/src/hw/ps2port.o Compile checking out/src/hw/serialio.o Compile checking out/src/hw/usb.o Compile checking out/src/hw/usb-uhci.o Compile checking out/src/hw/usb-ohci.o Compile checking out/src/hw/usb-ehci.o Compile checking out/src/hw/usb-hid.o Compile checking out/src/hw/usb-msc.o Compile checking out/src/hw/usb-uas.o Compile checking out/src/hw/blockcmd.o Compile checking out/src/hw/floppy.o Compile checking out/src/hw/ata.o Compile checking out/src/hw/ramdisk.o Compile checking out/src/hw/lsi-scsi.o Compile checking out/src/hw/esp-scsi.o Compile checking out/src/hw/megasas.o Compile checking out/src/hw/mpt-scsi.o Compile checking out/src/post.o Compile checking out/src/e820map.o Compile checking out/src/malloc.o Compile checking out/src/romfile.o Compile checking out/src/x86.o Compile checking out/src/optionroms.o Compile checking out/src/pmm.o Compile checking out/src/font.o Compile checking out/src/boot.o Compile checking out/src/bootsplash.o Compile checking out/src/jpeg.o Compile checking out/src/bmp.o Compile checking out/src/tcgbios.o Compile checking out/src/sha1.o src/post.c: In function 'reloc_preinit': src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds] 248 | *((u32*)(dest + *reloc)) += delta; | ^~ In file included from src/biosvar.h:11, from src/post.c:8: src/post.c:278:26: note: while referencing 'code32flat_start' 278 | updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start) | ^~~~~~~~~~~~~~~~ src/memmap.h:18:36: note: in definition of macro 'SYMBOL' 18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; }) | ^~~ src/post.c:278:18: note: in expansion of macro 'VSYMBOL' 278 | updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start) | ^~~~~~~ src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds] 248 | *((u32*)(dest + *reloc)) += delta; | ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~ In file included from src/biosvar.h:11, from src/post.c:8: src/post.c:278:26: note: while referencing 'code32flat_start' 278 | updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start) | ^~~~~~~~~~~~~~~~ src/memmap.h:18:36: note: in definition of macro 'SYMBOL' 18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; }) | ^~~ src/post.c:278:18: note: in expansion of macro 'VSYMBOL' 278 | updateRelocs(VSYMBOL(code32flat_start), VSYMBOL(_reloc_init_start) | ^~~~~~~ Compile checking out/src/hw/pcidevice.o Compile checking out/src/hw/ahci.o Compile checking out/src/hw/pvscsi.o Compile checking out/src/hw/usb-xhci.o Compile checking out/src/hw/usb-hub.o Compile checking out/src/hw/sdcard.o Compile checking out/src/fw/coreboot.o Compile checking out/src/fw/lzmadecode.o Compile checking out/src/fw/multiboot.o Compile checking out/src/fw/csm.o Compile checking out/src/fw/biostables.o Compile checking out/src/fw/paravirt.o Compile checking out/src/fw/shadow.o Compile checking out/src/fw/pciinit.o Compile checking out/src/fw/smm.o Compile checking out/src/fw/smp.o Compile checking out/src/fw/mtrr.o Compile checking out/src/fw/xen.o Compile checking out/src/fw/acpi.o Compile checking out/src/fw/mptable.o Compile checking out/src/fw/pirtable.o Compile checking out/src/fw/smbios.o Compile checking out/src/fw/romfile_loader.o Compile checking out/src/hw/virtio-ring.o Compile checking out/src/hw/virtio-pci.o src/tcgbios.c: In function 'tpm20_write_EfiSpecIdEventStruct': src/tcgbios.c:290:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds] 290 | event.hdr.digestSizes[count].algorithmId = be16_to_cpu(sel->hashAlg); | ~~~~~~~~~~~~~~~~~~~~~^~~~~~~ In file included from src/tcgbios.c:22: src/std/tcg.h:527:7: note: while referencing 'digestSizes' 527 | } digestSizes[0]; | ^~~~~~~~~~~ Compile checking out/src/hw/virtio-blk.o src/tcgbios.c:291:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds] 291 | event.hdr.digestSizes[count].digestSize = hsize; | ~~~~~~~~~~~~~~~~~~~~~^~~~~~~ In file included from src/tcgbios.c:22: src/std/tcg.h:527:7: note: while referencing 'digestSizes' 527 | } digestSizes[0]; | ^~~~~~~~~~~ In file included from src/fw/mptable.c:17: src/fw/mptable.c: In function 'mptable_setup': src/string.h:23:16: warning: '__builtin_memcpy' forming offset 7 is out of the bounds [0, 7] [-Warray-bounds] 23 | #define memcpy __builtin_memcpy src/fw/mptable.c:38:5: note: in expansion of macro 'memcpy' 38 | memcpy(config->oemid, BUILD_CPUNAME8, sizeof(config->oemid)); | ^~~~~~ Compile checking out/src/hw/virtio-scsi.o Compile checking out/src/hw/tpm_drivers.o Compile checking out/src/hw/nvme.o Compiling whole program out/code32seg.o Compiling (16bit) out/romlayout.o Compiling whole program out/ccode16.o In file included from src/fw/acpi.c:21: src/fw/acpi.c: In function 'build_header.constprop': src/string.h:23:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds] 23 | #define memcpy __builtin_memcpy src/fw/acpi.c:33:5: note: in expansion of macro 'memcpy' 33 | memcpy(h->oem_id, BUILD_APPNAME6, 6); | ^~~~~~ src/fw/acpi.c: In function 'acpi_setup': src/string.h:23:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds] 23 | #define memcpy __builtin_memcpy src/fw/acpi.c:681:5: note: in expansion of macro 'memcpy' 681 | memcpy(rsdp.oem_id, BUILD_APPNAME6, 6); | ^~~~~~ Compiling whole program out/ccode32flat.o In file included from out/ccode32flat.o.tmp.c:54: ./src/tcgbios.c: In function 'tpm20_write_EfiSpecIdEventStruct': ./src/tcgbios.c:290:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds] 290 | event.hdr.digestSizes[count].algorithmId = be16_to_cpu(sel->hashAlg); | ~~~~~~~~~~~~~~~~~~~~~^~~~~~~ In file included from ./src/tcgbios.c:22, from out/ccode32flat.o.tmp.c:54: ./src/std/tcg.h:527:7: note: while referencing 'digestSizes' 527 | } digestSizes[0]; | ^~~~~~~~~~~ In file included from out/ccode32flat.o.tmp.c:54: ./src/tcgbios.c:291:30: warning: array subscript 'be32_to_cpu (_19) + 4294967295' is outside the bounds of an interior zero-length array 'struct TCG_EfiSpecIdEventAlgorithmSize[0]' [-Wzero-length-bounds] 291 | event.hdr.digestSizes[count].digestSize = hsize; | ~~~~~~~~~~~~~~~~~~~~~^~~~~~~ In file included from ./src/tcgbios.c:22, from out/ccode32flat.o.tmp.c:54: ./src/std/tcg.h:527:7: note: while referencing 'digestSizes' 527 | } digestSizes[0]; | ^~~~~~~~~~~ In file included from out/ccode32flat.o.tmp.c:4: ./src/fw/acpi.c: In function 'build_header.constprop': ./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds] 156 | #define memcpy __builtin_memcpy ./src/fw/acpi.c:33:5: note: in expansion of macro 'memcpy' 33 | memcpy(h->oem_id, BUILD_APPNAME6, 6); | ^~~~~~ In function 'mptable_setup', inlined from 'qemu_platform_setup' at ./src/fw/paravirt.c:180:9: ./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 7 is out of the bounds [0, 7] [-Warray-bounds] 156 | #define memcpy __builtin_memcpy ./src/fw/mptable.c:38:5: note: in expansion of macro 'memcpy' 38 | memcpy(config->oemid, BUILD_CPUNAME8, sizeof(config->oemid)); | ^~~~~~ In function 'acpi_setup', inlined from 'qemu_platform_setup' at ./src/fw/paravirt.c:204:5: ./src/string.c:156:16: warning: '__builtin_memcpy' forming offset 5 is out of the bounds [0, 5] [-Warray-bounds] 156 | #define memcpy __builtin_memcpy ./src/fw/acpi.c:681:5: note: in expansion of macro 'memcpy' 681 | memcpy(rsdp.oem_id, BUILD_APPNAME6, 6); | ^~~~~~ In file included from out/ccode32flat.o.tmp.c:42: ./src/post.c: In function 'dopost': ./src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds] 248 | *((u32*)(dest + *reloc)) += delta; | ^~ In file included from ./src/biosvar.h:11, from ./src/misc.c:8, from out/ccode32flat.o.tmp.c:1: ./src/fw/shadow.c:190:29: note: while referencing 'code32flat_start' 190 | u32 cstart = SYMBOL(code32flat_start), cend = SYMBOL(code32flat_end); | ^~~~~~~~~~~~~~~~ ./src/memmap.h:18:36: note: in definition of macro 'SYMBOL' 18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; }) | ^~~ In file included from out/ccode32flat.o.tmp.c:42: ./src/post.c:248:34: warning: array subscript 'u32 {aka unsigned int}[0]' is partly outside array bounds of 'char[1]' [-Warray-bounds] 248 | *((u32*)(dest + *reloc)) += delta; | ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~ In file included from ./src/biosvar.h:11, from ./src/misc.c:8, from out/ccode32flat.o.tmp.c:1: ./src/fw/shadow.c:190:29: note: while referencing 'code32flat_start' 190 | u32 cstart = SYMBOL(code32flat_start), cend = SYMBOL(code32flat_end); | ^~~~~~~~~~~~~~~~ ./src/memmap.h:18:36: note: in definition of macro 'SYMBOL' 18 | #define SYMBOL(SYM) ({ extern char SYM; (u32)&SYM; }) | ^~~ Building ld scripts Version: rel-1.13.0-0-gf21b5a4-dirty-20230626_175724-sandbox Fixed space: 0xe05b-0x10000 total: 8101 slack: 11 Percent slack: 0.1% 16bit size: 37952 32bit segmented size: 2221 32bit flat size: 43667 32bit flat init size: 77760 Lowmem size: 2240 f-segment var size: 1248 Linking out/rom16.o Linking out/rom32seg.o Stripping out/rom32seg.strip.o Stripping out/rom16.strip.o Linking out/rom.o ld: cannot use executable file 'out/rom16.strip.o' as input to a link make: *** [Makefile:187: out/rom.o] Error 1 [-] Bios compilation failed — Reply to this email directly, view it on GitHub <#1618 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAOFH35MYN4KXS62N523AODXNIBV3ANCNFSM6AAAAAAZNT35HU> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[seanthegeek]

@doomedraven Thanks. In the meantime, can you reopen this issue so others are aware of the issue and the workaround without digging through closed tickets? That would help prevent duplicate issue reports too.