Re: [Xen-devel] [PATCH 2/2] x86/hvm: Don't intercept #UD exceptions in general

2016-01-27 Thread Andrew Cooper
On 27/01/16 19:14, Boris Ostrovsky wrote: > On 01/27/2016 01:59 PM, Andrew Cooper wrote: >> On 27/01/16 18:49, Boris Ostrovsky wrote: >>> On 01/27/2016 01:11 PM, Andrew Cooper wrote: diff --git a/xen/arch/x86/domctl.c b/xen/arch/x86/domctl.c index 1d71216..1084e82 100644 --- a/xen/ar

Re: [Xen-devel] [PATCH 2/2] x86/hvm: Don't intercept #UD exceptions in general

2016-01-27 Thread Boris Ostrovsky
On 01/27/2016 01:59 PM, Andrew Cooper wrote: On 27/01/16 18:49, Boris Ostrovsky wrote: On 01/27/2016 01:11 PM, Andrew Cooper wrote: diff --git a/xen/arch/x86/domctl.c b/xen/arch/x86/domctl.c index 1d71216..1084e82 100644 --- a/xen/arch/x86/domctl.c +++ b/xen/arch/x86/domctl.c @@ -65,8 +65,20 @@

Re: [Xen-devel] [PATCH 2/2] x86/hvm: Don't intercept #UD exceptions in general

2016-01-27 Thread Andrew Cooper
On 27/01/16 18:49, Boris Ostrovsky wrote: > On 01/27/2016 01:11 PM, Andrew Cooper wrote: >> c/s 0f1cb96e "x86 hvm: Allow cross-vendor migration" caused HVM >> domains to >> unconditionally intercept #UD exceptions. While cross-vendor >> migration is >> cool as a demo, it is extremely niche. >> >>

Re: [Xen-devel] [PATCH 2/2] x86/hvm: Don't intercept #UD exceptions in general

2016-01-27 Thread Boris Ostrovsky
On 01/27/2016 01:11 PM, Andrew Cooper wrote: c/s 0f1cb96e "x86 hvm: Allow cross-vendor migration" caused HVM domains to unconditionally intercept #UD exceptions. While cross-vendor migration is cool as a demo, it is extremely niche. Intercepting #UD allows userspace code in a multi-vcpu guest t

[Xen-devel] [PATCH 2/2] x86/hvm: Don't intercept #UD exceptions in general

2016-01-27 Thread Andrew Cooper
c/s 0f1cb96e "x86 hvm: Allow cross-vendor migration" caused HVM domains to unconditionally intercept #UD exceptions. While cross-vendor migration is cool as a demo, it is extremely niche. Intercepting #UD allows userspace code in a multi-vcpu guest to execute arbitrary instructions in the x86 emu