I think this bug was fixed in QEMU 3.1 -- I can reproduce the assert on 3.0 but not on 3.1.
** Changed in: qemu Status: New => Fix Released -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1810956 Title: qemu-2.12.1 crashes when running malicious bootloader. Status in QEMU: Fix Released Bug description: Running specific bootloader on Qemu causes fatal error and hence SIGABRT in /qemu-2.12.1/tcg/tcg.c on line 2684. Bootloader binary code is included in attachments. The code was generated by assembling a valid bootloader, then appending random-bytes from file `/dev/urandom` to the binary file. To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1810956/+subscriptions