>>> On 04.10.18 at 18:36, <paul.durr...@citrix.com> wrote: > I still think an implicit domain_crash() doesn't really belong in something > that looks like a straightforward wrapper around a per-implementation jump > table. How about iommu_map/unmap_may_crash() instead to highlight the > semantic?
If anything then the other way around, i.e. iommu_unmap_no_crash(), such that only callers who explicitly mean to deal with the crashing themselves would use the otherwise insecure variant. Jan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xenproject.org https://lists.xenproject.org/mailman/listinfo/xen-devel