From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jan Kiszka Subject: Re: [PATCH] KVM: nVMX: Fix IRQs inject to L2 which belong to L1 since race Date: Thu, 03 Jul 2014 09:33:52 +0200 Message-ID: <53B50760.3040708@siemens.com> References: <1404284054-51863-1-git-send-email-wanpeng.li@linux.intel.com> <20140703051142.GA2687@kernel> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: Paolo Bonzini , Gleb Natapov , Hu Robert , kvm@vger.kernel.org, linux-kernel@vger.kernel.org To: Bandan Das , Wanpeng Li Return-path: In-Reply-To: Sender: linux-kernel-owner@vger.kernel.org List-Id: kvm.vger.kernel.org On 2014-07-03 07:29, Bandan Das wrote: > Wanpeng Li writes: > >> Hi Bandan, >> On Wed, Jul 02, 2014 at 12:27:59PM -0400, Bandan Das wrote: >>> Wanpeng Li writes: >>> >>>> This patch fix bug https://bugzilla.kernel.org/show_bug.cgi?id=72381 >>> I can also reproduce this easily with Linux as L1 by "slowing it down" >>> eg. running with ept = 0 >>> >>> I suggest changing the subject to - >>> KVM: nVMX: Fix race that incorrectly injects L1's irq to L2 >>> >> >> Ok, I will fold this to next version. ;-) >> >>>> If we didn't inject a still-pending event to L1 since nested_run_pending, >>>> KVM_REQ_EVENT should be requested after the vmexit in order to inject the >>>> event to L1. However, current log blindly request a KVM_REQ_EVENT even if >>> >>> What's current "log" ? Do you mean current "code" ? >>> >> >> Yeah, it's a typo. I mean "logic". >> >> [...] >>> Also, I am wondering isn't it enough to just do this to avoid this race ? >>> >>> static int vmx_interrupt_allowed(struct kvm_vcpu *vcpu) >>> { >>> - return (!to_vmx(vcpu)->nested.nested_run_pending && >>> + return (!is_guest_mode(vcpu) && >>> + !to_vmx(vcpu)->nested.nested_run_pending && >>> vmcs_readl(GUEST_RFLAGS) & X86_EFLAGS_IF) && >>> !(vmcs_read32(GUEST_INTERRUPTIBILITY_INFO) & >>> >> >> I don't think you fix the root cause of the race, and there are two cases which >> I concern about your proposal: >> >> - If there is a special L1 which don't ask to exit on external intrs, you will >> lose the intrs which L0 inject to L2. > > Oh didn't think about that case :), thanks for the pointing this out. > It's easy to check this with Xen as L1, I suppose. Xen most probably intercepts external interrupts, but Jailhouse definitely does not. We also have a unit test for that, but I will likely not expose the issue of lost events. Jan -- Siemens AG, Corporate Technology, CT RTC ITP SES-DE Corporate Competence Center Embedded Linux