On Thu, Jun 20, 2024 at 9:25 AM Jan Beulich <jbeul...@suse.com> wrote: > Not exactly. You may not assert on idx. The assertion, if any, wants to > check d->nr_altp2m against MAX_EPTP.
In addition to the check in arch_sanitize_domain? As a safeguard? > You're again comparing cases where we control the index (in the loop) with > cases where we don't (hypercall inputs). So, replacing strictly the occurrences where we don't control the index, and leave everything else as is. Okay. P.
