From: Boris Ostrovsky <boris.ostrovsky@oracle.com>
To: Jan Beulich <JBeulich@suse.com>, Kevin Tian <kevin.tian@intel.com>
Cc: "ian.campbell@citrix.com" <ian.campbell@citrix.com>,
"stefano.stabellini@eu.citrix.com"
<stefano.stabellini@eu.citrix.com>,
Jun Nakajima <jun.nakajima@intel.com>,
Andrew Cooper <andrew.cooper3@citrix.com>,
"ian.jackson@eu.citrix.com" <ian.jackson@eu.citrix.com>,
"xen-devel@lists.xen.org" <xen-devel@lists.xen.org>,
Eddie Dong <eddie.dong@intel.com>,
"Aravind.Gopalakrishnan@amd.com" <Aravind.Gopalakrishnan@amd.com>,
"suravee.suthikulpanit@amd.com" <suravee.suthikulpanit@amd.com>,
Tamas Lengyel <tamas.lengyel@zentific.com>
Subject: Re: [PATCH v6 2/4] x86/hvm: Treat non-instruction fetch nested page faults also as read violations
Date: Fri, 15 Aug 2014 10:31:10 -0400 [thread overview]
Message-ID: <53EE19AE.1010000@oracle.com> (raw)
In-Reply-To: <53ED4D6E02000078000BA7FC@mail.emea.novell.com>
On 08/14/2014 06:59 PM, Jan Beulich wrote:
>>>> On 15.08.14 at 00:34, <kevin.tian@intel.com> wrote:
>>> From: Jan Beulich [mailto:JBeulich@suse.com]
>>> Sent: Thursday, August 14, 2014 1:40 PM
>>>
>>>>>> On 14.08.14 at 18:49, <andrew.cooper3@citrix.com> wrote:
>>>> On 14/08/14 17:43, Tian, Kevin wrote:
>>>>> but doing so just moves from one incomplete solution (where
>>>>> read-modify-write is not treated as read-violation) to another
>>>>> incomplete solution (where all writes are treated read-violation). If
>>>>> there's actual usage relying on accurate read-violation information,
>>>>> either solution doesn't work. So I don't see the value of this change.
>>>>>
>>>> I would agree. Anything using this information will have to have
>>>> detailed knowledge of what the hardware is capable of reporting, to
>>>> understand the information it has to hand.
>>>>
>>>> I think Xen should faithfully pass on what hardware reports. It will be
>>>> more useful to the consumer than blurring the details like this.
>>> Not if it's unreliable. Plus on x86 elsewhere write access implies
>>> read access anyway. If you look at the draft patch I had sent
>>> Tamas (which I intend to rebase on his series), you'll see that
>>> there the change here is actually strictly needed.
>>>
>> I think you're mixing the behavior and policy here. from behavior p.o.v,
>> we should keep whatever hardware reports, which describes the behavior
>> of the instruction causing violation whether it's a write operation or read
>> operation. From policy p.o.v, you may treat a write operation as read
>> operation in specific code paths (if access==read || access ==write).
> No - the hardware specifically does _not_ guarantee to report the
> actual characteristics of a read-modify-write instruction. Or at least
> that's what your documentation warns about. And to be on the safe
> side, treating all writes as also being reads is the better option than
> to mistakenly treat r-m-w as just w.
Is this specific to VMX or does SVM have the same problem (I am not
aware of this but I might be wrong). Because if it doesn't then I think
Tamas' [PATCH v6 2/4] should have SVM report actual bits.
If, OTOH, you need both return same results for consistency then I
wonder whether we could move this up the stack into HVM common code.
-boris
next prev parent reply other threads:[~2014-08-15 14:31 UTC|newest]
Thread overview: 43+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-08-11 14:48 [PATCH v6 1/4] x86: Consolidate boolean inputs in hvm and p2m into a shared bitmap Tamas K Lengyel
2014-08-11 14:48 ` [PATCH v6 2/4] x86/hvm: Treat non-instruction fetch nested page faults also as read violations Tamas K Lengyel
2014-08-11 16:04 ` Jan Beulich
2014-08-14 0:31 ` Tian, Kevin
2014-08-14 8:02 ` Tamas Lengyel
2014-08-14 16:43 ` Tian, Kevin
2014-08-14 16:49 ` Andrew Cooper
2014-08-14 17:32 ` Tamas Lengyel
2014-08-14 20:39 ` Jan Beulich
2014-08-14 22:34 ` Tian, Kevin
2014-08-14 22:59 ` Jan Beulich
2014-08-14 23:04 ` Tian, Kevin
2014-08-14 23:08 ` Jan Beulich
2014-08-14 23:20 ` Tian, Kevin
2014-08-14 23:36 ` Jan Beulich
2014-08-14 23:40 ` Tian, Kevin
2014-08-15 14:57 ` Jan Beulich
2014-08-15 20:17 ` Tian, Kevin
2014-08-15 21:23 ` Jan Beulich
2014-08-15 21:32 ` Tian, Kevin
2014-08-15 14:31 ` Boris Ostrovsky [this message]
2014-08-15 15:01 ` Jan Beulich
2014-08-15 15:09 ` Boris Ostrovsky
2014-08-15 15:29 ` Jan Beulich
2014-08-15 15:50 ` Boris Ostrovsky
2014-08-15 16:33 ` Tamas Lengyel
2014-08-15 16:48 ` Jan Beulich
2014-08-18 19:37 ` Tamas K Lengyel
2014-08-18 20:31 ` Jan Beulich
2014-08-11 14:48 ` [PATCH v6 3/4] x86/mem_event: Deliver gla fault EPT violation information Tamas K Lengyel
2014-08-11 16:08 ` Jan Beulich
2014-08-12 11:18 ` Tamas Lengyel
2014-08-12 12:10 ` Jan Beulich
2014-08-11 17:27 ` Boris Ostrovsky
2014-08-11 18:35 ` Tamas Lengyel
2014-08-11 14:48 ` [PATCH v6 4/4] tools/xen-access: Print gla valid/fault information Tamas K Lengyel
2014-08-12 15:31 ` Ian Jackson
2014-08-12 21:54 ` Tamas Lengyel
2014-08-11 16:03 ` [PATCH v6 1/4] x86: Consolidate boolean inputs in hvm and p2m into a shared bitmap Jan Beulich
2014-08-11 17:13 ` Boris Ostrovsky
2014-08-11 17:23 ` Tamas Lengyel
2014-08-14 0:18 ` Tian, Kevin
2014-08-28 12:36 ` Tim Deegan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53EE19AE.1010000@oracle.com \
--to=boris.ostrovsky@oracle.com \
--cc=Aravind.Gopalakrishnan@amd.com \
--cc=JBeulich@suse.com \
--cc=andrew.cooper3@citrix.com \
--cc=eddie.dong@intel.com \
--cc=ian.campbell@citrix.com \
--cc=ian.jackson@eu.citrix.com \
--cc=jun.nakajima@intel.com \
--cc=kevin.tian@intel.com \
--cc=stefano.stabellini@eu.citrix.com \
--cc=suravee.suthikulpanit@amd.com \
--cc=tamas.lengyel@zentific.com \
--cc=xen-devel@lists.xen.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.