Re: [PATCH v1 1/8] virtio: Force only split mode with protected guest

Andi Kleen
2021-06-03T02:56:52Z

>
> I agree, but I want to know why indirect descriptor needs to be
> disabled. The table can't be wrote by the device since it's not
> coherent swiotlb mapping.

I had all kinds of problems with uninitialized entries in the indirect
table. So I gave up on it and concluded it would be too difficult to secure.

-Andi