>>> On 04.10.18 at 18:36, <paul.durr...@citrix.com> wrote:
> I still think an implicit domain_crash() doesn't really belong in something 
> that looks like a straightforward wrapper around a per-implementation jump 
> table. How about iommu_map/unmap_may_crash() instead to highlight the 
> semantic?

If anything then the other way around, i.e. iommu_unmap_no_crash(),
such that only callers who explicitly mean to deal with the crashing
themselves would use the otherwise insecure variant.

Jan



_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

Reply via email to