Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-20 Thread Andrew Cooper
On 18/01/2023 2:13 pm, Jan Beulich wrote: > On 17.01.2023 20:13, Andrew Cooper wrote: >> On 12/01/2023 10:42 am, Jan Beulich wrote: >>> On 12.01.2023 11:31, Andrew Cooper wrote: On 12/01/2023 9:47 am, Jan Beulich wrote: > On 12.01.2023 00:15, Andrew Cooper wrote: >> On 11/01/2023 1:57

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-18 Thread Jan Beulich
On 17.01.2023 20:13, Andrew Cooper wrote: > On 12/01/2023 10:42 am, Jan Beulich wrote: >> On 12.01.2023 11:31, Andrew Cooper wrote: >>> On 12/01/2023 9:47 am, Jan Beulich wrote: On 12.01.2023 00:15, Andrew Cooper wrote: > On 11/01/2023 1:57 pm, Jan Beulich wrote: >> Make HVM=y release

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-17 Thread Andrew Cooper
On 12/01/2023 10:42 am, Jan Beulich wrote: > On 12.01.2023 11:31, Andrew Cooper wrote: >> On 12/01/2023 9:47 am, Jan Beulich wrote: >>> On 12.01.2023 00:15, Andrew Cooper wrote: On 11/01/2023 1:57 pm, Jan Beulich wrote: > Make HVM=y release build behavior prone against array overrun, by >>

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-12 Thread Jan Beulich
On 12.01.2023 11:31, Andrew Cooper wrote: > On 12/01/2023 9:47 am, Jan Beulich wrote: >> On 12.01.2023 00:15, Andrew Cooper wrote: >>> On 11/01/2023 1:57 pm, Jan Beulich wrote: Make HVM=y release build behavior prone against array overrun, by (ab)using array_access_nospec(). This is in pa

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-12 Thread Andrew Cooper
On 12/01/2023 9:47 am, Jan Beulich wrote: > On 12.01.2023 00:15, Andrew Cooper wrote: >> On 11/01/2023 1:57 pm, Jan Beulich wrote: >>> Make HVM=y release build behavior prone against array overrun, by >>> (ab)using array_access_nospec(). This is in particular to guard against >>> e.g. SH_type_unuse

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-12 Thread Jan Beulich
On 12.01.2023 00:15, Andrew Cooper wrote: > On 11/01/2023 1:57 pm, Jan Beulich wrote: >> Make HVM=y release build behavior prone against array overrun, by >> (ab)using array_access_nospec(). This is in particular to guard against >> e.g. SH_type_unused making it here unintentionally. >> >> Signed-o

Re: [PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-11 Thread Andrew Cooper
On 11/01/2023 1:57 pm, Jan Beulich wrote: > Make HVM=y release build behavior prone against array overrun, by > (ab)using array_access_nospec(). This is in particular to guard against > e.g. SH_type_unused making it here unintentionally. > > Signed-off-by: Jan Beulich > --- > v2: New. > > --- a/xe

[PATCH v2 9/9] x86/shadow: harden shadow_size()

2023-01-11 Thread Jan Beulich
Make HVM=y release build behavior prone against array overrun, by (ab)using array_access_nospec(). This is in particular to guard against e.g. SH_type_unused making it here unintentionally. Signed-off-by: Jan Beulich --- v2: New. --- a/xen/arch/x86/mm/shadow/private.h +++ b/xen/arch/x86/mm/shado