From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bandan Das Subject: Re: [PATCH 4/4] nvmx: check for shadow vmcs check on entry Date: Thu, 21 Jul 2016 15:20:12 -0400 Message-ID: References: <1469053536-11130-1-git-send-email-bsd@redhat.com> <1469053536-11130-5-git-send-email-bsd@redhat.com> Mime-Version: 1.0 Content-Type: text/plain Cc: kvm@vger.kernel.org, rkrcmar@redhat.com, linux-kernel@vger.kernel.org To: Paolo Bonzini Return-path: Sender: linux-kernel-owner@vger.kernel.org List-Id: kvm.vger.kernel.org Paolo Bonzini writes: > On 21/07/2016 00:25, Bandan Das wrote: >> vmentry should check whether the vmcs provided by >> the guest hypervisor is a shadow vmcs and fail. > > How can this happen, since vmptrld checks the revision_id as you said below? This is more of a change that adheres to the spec (26.1 Basic VM-Entry Checks); the failure path is slightly different compared to vmptrld though. It's small and harmless but I am ok if you prefer dropping it. Thanks for the review! > Paolo > >> Also, vmptrld should check whether a shadow vmcs >> is being loaded by the guest without support being present >> but this check happens as part of checking the revision_id.