From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paolo Bonzini Subject: Re: [PATCH] KVM: x86: Revert "check CS.DPL against RPL during task switch" Date: Sun, 17 Aug 2014 23:13:27 +0200 Message-ID: <53F11AF7.7080706@redhat.com> References: <53F07745.9080200@redhat.com> <1408303946-2796-1-git-send-email-namit@cs.technion.ac.il> <53F11A21.2040406@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: kvm@vger.kernel.org To: Nadav Amit Return-path: Received: from mail-wi0-f177.google.com ([209.85.212.177]:38042 "EHLO mail-wi0-f177.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751424AbaHQVNc (ORCPT ); Sun, 17 Aug 2014 17:13:32 -0400 Received: by mail-wi0-f177.google.com with SMTP id ho1so2804104wib.4 for ; Sun, 17 Aug 2014 14:13:31 -0700 (PDT) In-Reply-To: <53F11A21.2040406@redhat.com> Sender: kvm-owner@vger.kernel.org List-ID: Il 17/08/2014 23:09, Paolo Bonzini ha scritto: > Il 17/08/2014 21:32, Nadav Amit ha scritto: >> This reverts commit 5045b468037dfe1c848827ce10e99d87f5669160. Although the >> cs.dpl=cs.rpl check is mentioned in table 7-1 of the SDM as causing a #TSS >> exception, it is not mentioned in table 6-6 that lists "invalid TSS conditions" >> which cause #TSS exceptions. As it causes some tests, which pass on bare-metal, >> to fail - it should be reverted. > > Right. However, I think reverting the patch is too big a hammer. We > still need in_task_switch to raise TS_VECTOR instead of GP_VECTOR, so I > propose instead something like: > > diff --git a/arch/x86/kvm/emulate.c b/arch/x86/kvm/emulate.c > index 56657b0bb3bb..cd230b035514 100644 > --- a/arch/x86/kvm/emulate.c > +++ b/arch/x86/kvm/emulate.c > @@ -1468,7 +1468,7 @@ static int __load_segment_descriptor(struct x86_emulate_ctxt *ctxt, > return ret; > > err_code = selector & 0xfffc; > - err_vec = GP_VECTOR; > + err_vec = in_task_switch ? TS_VECTOR : GP_VECTOR; > > /* can't load system descriptor into segment selector */ > if (seg <= VCPU_SREG_GS && !seg_desc.s) > @@ -1491,9 +1491,6 @@ static int __load_segment_descriptor(struct x86_emulate_ctxt *ctxt, > goto exception; > break; > case VCPU_SREG_CS: > - if (in_task_switch && rpl != dpl) > - goto exception; > - > if (!(seg_desc.type & 8)) > goto exception; > Also, what about the rpl > cpl test below, for non-conforming code segments? It is not mentioned in table 6-6 either. Paolo