From mboxrd@z Thu Jan 1 00:00:00 1970 From: Olaf Hering Subject: Re: [PATCH 0 of 2] Fix correctness race in xc_mem_paging_prep Date: Wed, 30 Nov 2011 14:21:00 +0100 Message-ID: <20111130132100.GA17890@aepfle.de> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: Andres Lagar-Cavilla Cc: xen-devel@lists.xensource.com, ian.campbell@citrix.com, andres@gridcentric.ca, tim@xen.org, keir.xen@gmail.com, JBeulich@suse.com, ian.jackson@citrix.com, adin@gridcentric.ca List-Id: xen-devel@lists.xenproject.org On Tue, Nov 29, Andres Lagar-Cavilla wrote: > P2m_mem_paging_prep ensures that an mfn is backing the paged-out gfn, and > transitions to the next state in the paging state machine for this page. > Foreign mappings of the gfn will now succeed. This is the key idea, as it > allows the pager to now map the gfn and fill in its contents. > > Unfortunately, it also allows any other foreign mapper to map the gfn and read > its contents. This is particularly dangerous when the populate is launched > by a foreign mapper in the first place, which will be actively retrying the > map operation and might race with the pager. Qemu-dm being a prime example. Yes, I think thats a real issue. The concept looks ok to me. Olaf