PROBLEM: VirtIO DRM driver crashes when setting specific 16.16 fixed-point property values

[Gerd Hoffmann]

On Fri, May 24, 2019 at 02:46:50PM -0400, Tyler Slabinski wrote:
> VirtIO DRM driver crashes when setting specific 16.16 fixed-point
> property values
> 
> When running a virtual machine with a VirtIO GPU, it's possible to
> crash the entire VM by setting the value of a 16.16 fixed-point
> property to any value below 65536 (1.0 in 16.16 format or 0x00010000).
> As a specific example, setting the SRC_W property on a plane DRM
> object to a value of 30000 will cause the VM to hard-shutdown.

Do you have a qemu stacktrace?

thanks,
  Gerd