From: Dor Laor <dor.laor-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
To: "Dong, Eddie" <eddie.dong-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
Cc: kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org,
"Liu,
Eric E" <eric.e.liu-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
Subject: Re: [PATCH] KVM: emulator: Only allow VMCALL/VMMCALL trapped by #UD
Date: Sun, 06 Jan 2008 01:36:31 +0200 [thread overview]
Message-ID: <4780147F.10708@qumranet.com> (raw)
In-Reply-To: <10EA09EFD8728347A513008B6B0DA77A029B54D6-wq7ZOvIWXbNpB2pF5aRoyrfspsVTdybXVpNB7YpNyf8@public.gmane.org>
[-- Attachment #1.1: Type: text/plain, Size: 2143 bytes --]
Dong, Eddie wrote:
> Anthony Liguori wrote:
>
>> Yang, Sheng wrote:
>>
>>> From 9743b5299bae1779c2b893cbeb86122bcccb9b2d Mon Sep 17 00:00:00
>>> 2001
>>> From: Sheng Yang <sheng.yang-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
>>> Date: Wed, 2 Jan 2008 14:49:22 +0800
>>> Subject: [PATCH] KVM: emulator: Only allow VMCALL/VMMCALL trapped by
>>> #UD
>>>
>>> When executing a test program called "crashme", we found the KVM
>>> guest
>>> cannot survived more than ten seconds, then encounterd kernel panic.
>>> The basic concept of "crashme" is graduating random assembly code and
>>> trying to execute them in a fork process.
>>>
>>> After some fix on emulator valid judgment, we found it's hard to get
>>> the current emulator handle the invalid instructions correctly, for
>>> the #UD trap for hypercall patching caused troubles. The problem is,
>>> if the opcode itself was OK, but combination of opcode and modrm_reg
>>> was invalid, and one operand of the opcode was memory(SrcMem or
>>> DstMem), emulator would fetched the memory operand first rather than
>>> judged the validity, and may encounter error there.
>>>
>>>
>> Nice catch!
>>
>> Regards,
>>
>> Anthony Liguori
>>
>>
> Anthony:
> Actually I am wondering if the binary used for VMMCALL could be
> assumed will never be used by Intel processor or vice versa. BTW, what
> is the nenefit to remove hypercall page, which provide more clean
> approach IMO?
> thx,eddie
>
>
The benefit is that one can migrate a running guest from Intel to Amd
and vise versa without
any effort of the guest/host knowing that.
Can you offer other binary code for vmmcall that you're sure it won't be
used in the future?
Regards,
Dor
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> kvm-devel mailing list
> kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/kvm-devel
>
>
[-- Attachment #1.2: Type: text/html, Size: 3199 bytes --]
[-- Attachment #2: Type: text/plain, Size: 228 bytes --]
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
[-- Attachment #3: Type: text/plain, Size: 186 bytes --]
_______________________________________________
kvm-devel mailing list
kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/kvm-devel
next prev parent reply other threads:[~2008-01-05 23:36 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-04 1:36 [PATCH] KVM: emulator: Only allow VMCALL/VMMCALL trapped by #UD Yang, Sheng
[not found] ` <200801040936.08670.sheng.yang-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
2008-01-04 2:12 ` Anthony Liguori
[not found] ` <477D9610.4010605-rdkfGonbjUSkNkDKm+mE6A@public.gmane.org>
2008-01-04 5:52 ` Dong, Eddie
[not found] ` <10EA09EFD8728347A513008B6B0DA77A029B54D6-wq7ZOvIWXbNpB2pF5aRoyrfspsVTdybXVpNB7YpNyf8@public.gmane.org>
2008-01-05 23:36 ` Dor Laor [this message]
2008-01-06 2:29 ` Anthony Liguori
[not found] ` <47803CEF.7000303-rdkfGonbjUSkNkDKm+mE6A@public.gmane.org>
2008-01-07 10:01 ` Dong, Eddie
[not found] ` <10EA09EFD8728347A513008B6B0DA77A029B5DC3-wq7ZOvIWXbNpB2pF5aRoyrfspsVTdybXVpNB7YpNyf8@public.gmane.org>
2008-01-07 10:09 ` Avi Kivity
[not found] ` <4781FA68.7040604-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-07 14:42 ` Dong, Eddie
[not found] ` <10EA09EFD8728347A513008B6B0DA77A029B5E20-wq7ZOvIWXbNpB2pF5aRoyrfspsVTdybXVpNB7YpNyf8@public.gmane.org>
2008-01-07 17:43 ` Avi Kivity
[not found] ` <478264B5.8030503-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-09 15:03 ` Dong, Eddie
[not found] ` <10EA09EFD8728347A513008B6B0DA77A029F5259-wq7ZOvIWXbNpB2pF5aRoyrfspsVTdybXVpNB7YpNyf8@public.gmane.org>
2008-01-09 15:20 ` Avi Kivity
[not found] ` <4784E64E.30205-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-09 15:34 ` Dong, Eddie
2008-01-06 8:40 ` Avi Kivity
[not found] ` <478093F0.6060003-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-07 2:21 ` Yang, Sheng
[not found] ` <200801071021.12038.sheng.yang-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
2008-01-07 9:22 ` Avi Kivity
[not found] ` <4781EF63.4010201-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-07 10:23 ` Yang, Sheng
[not found] ` <200801071823.15040.sheng.yang-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org>
2008-01-07 10:43 ` Avi Kivity
[not found] ` <47820268.9060309-atKUWr5tajBWk0Htik3J/w@public.gmane.org>
2008-01-07 11:21 ` Yang, Sheng
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4780147F.10708@qumranet.com \
--to=dor.laor-re5jqeeqqe8avxtiumwx3w@public.gmane.org \
--cc=dor.laor-atKUWr5tajBWk0Htik3J/w@public.gmane.org \
--cc=eddie.dong-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org \
--cc=eric.e.liu-ral2JQCrhuEAvxtiuMwx3w@public.gmane.org \
--cc=kvm-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox