On 05/07/2024 4:05 pm, Matthew Barnes wrote: > xen-hvmcrash would previously save records, overwrite the instruction > pointer with a bogus value, and then restore them to crash a domain > just enough to cause the guest OS to memdump. > > This approach is found to be unreliable when tested on a guest running > Windows 10 x64, with some executions doing nothing at all. > > Another approach would be to trigger NMIs. This approach is found to be > unreliable when tested on Linux (Ubuntu 22.04), as Linux will ignore > NMIs if it is not configured to handle such. > > Injecting a double fault abort to all vCPUs is found to be more > reliable at crashing and invoking memdumps from Windows and Linux > domains. > > This patch modifies the xen-hvmcrash tool to inject #DF to all vCPUs > belonging to the specified domain, instead of overwriting RIP. > > Signed-off-by: Matthew Barnes <[email protected]>
Reviewed-by: Andrew Cooper <[email protected]> I'll queue this in my for-4.20 branch in due course.
