From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f198.google.com (mail-pf1-f198.google.com [209.85.210.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6F8F847ACD5 for ; Thu, 6 Aug 2026 17:06:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.198 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786035966; cv=none; b=KpJpItBSDnONdFIPVCRZwHqnrrIkUWap81KdWy4ZIpPKqeqQIs2IY2dUh+Ha1LvyuJUYA2XXOsTHHTgTnXnnhe3/eN8BkmqTL398WNWKDrFJDnlhznOTxRWHs6GpYkAvn7e0+Sl+VXGDESYIbaJ1pX4MXHveSkz1D2G9oc7mfU8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786035966; c=relaxed/simple; bh=7hC2BmI9wwlaYj0orRNJAkywV+VFEWJZ6Zow/Tak82E=; h=Date:Mime-Version:Message-ID:Subject:From:To:Cc:Content-Type; b=QbGxiNyDVkfkxsh7YTTXWvLW+IS4Pvl5sEfXm5Qs+SdjLbGPQDRbeLol5msoDVSygL0sZBjXZy8dV+mhDGa4+8a1acNQShGfpyRU3gM1kwYm9HpvSbKF7ihNR4z7HFHfQC45UzHLPxJDpuK0pdwf8aiPADXIdIgY3dhiAWUqVPY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=B48ZNrR9; arc=none smtp.client-ip=209.85.210.198 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="B48ZNrR9" Received: by mail-pf1-f198.google.com with SMTP id d2e1a72fcca58-84885a4fcabso2780226b3a.3 for ; Thu, 06 Aug 2026 10:06:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1786035965; x=1786640765; darn=vger.kernel.org; h=content-type:cc:to:from:subject:message-id:mime-version:date :reply-to:from:to:cc:subject:date:message-id:reply-to:content-type; bh=7jb4ZuFXYXCOb6UVyWGOFPQpZO16jEZntljGCX+SwX4=; b=B48ZNrR9yYSIbWk0T4BPXKsNBQcHwBaejZmvv7/0a522UxqmiuLmSGf4nYeJpzq3Tu tSVA4kDheuETyWH9R3Ydf+iHDrRQ7LEO25dwawS1crWlsJV++/Ot2gcUsTGbuQSHcLAw FDfyKmIeYRx0VlalEZbFFAvCd2f3ZsiYrbYrh3HBvLCOcQYJnD+MZ50AISF2mkz31naz GJDM5Bmb6gjAomQ94IDe27KXgAkMWzB385uupqCpCi5td5MuFHEL4feKzt5kup8kDUmh jkvF4DO/4Gi57Oe0gjbtutyQo5F13zIwAuSqR0h6kePJtNJ76yGppr9zT1U0jUX7rxgd DccQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786035965; x=1786640765; h=content-type:cc:to:from:subject:message-id:mime-version:date :reply-to:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=7jb4ZuFXYXCOb6UVyWGOFPQpZO16jEZntljGCX+SwX4=; b=W/2GbClqkVvEnnioYXwfrjI6/u5EOlPwllN3sUJzAdImEIhzGzZHoLOFDEPyxU81EL x7j/9X7wDkDmf/XOnWWhM/uLxnRhCVsMfjK5tMv7jxA9mmfa2v1g0JRiLfXh3yh4yU0W ilA2uFc1d2Tpjroj4NXjyMDaz6LGlP9rfZr6TjKVvfdQJhoLJviVxiOApXIbnh4DdMpN 5b/nlWtRBotT8kP4KToTfD7EGRT9pO43VmIezE9cZ/6FPZr+BKofhi5jIOT6pANjtt4a j6ku1kynMgh1tLr8a83LhCjWCFdzRmwkU/mEFvyRcQI3i3AN4ZyNKzoR99K8mHoKrimp cTvg== X-Forwarded-Encrypted: i=1; AHgh+RrkqGwDI66KDFgBWDLC7S9Z6BmwJgJwW63jE5aHFtJE4/dsH91tgZ7x4eysiauZKO4J1biTcceOK1aNotk=@vger.kernel.org X-Gm-Message-State: AOJu0YwsCtzyP8RNgSqRkLex9GBeUAHBAhKM+0aCge/gXgOFeP/s0f5f LIU3Brfkj0JAHGEO7VYqBJaHLttrBnqcyy11WHcCVSuy10tMH9nvc1b0S/AD0G5wA1ysjtdLPIn mTXjfNw== X-Received: from pfbdc5.prod.google.com ([2002:a05:6a00:35c5:b0:845:e386:e036]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a05:6a00:8018:b0:845:45b5:9825 with SMTP id d2e1a72fcca58-84f4fee2e43mr3502894b3a.37.1786035964578; Thu, 06 Aug 2026 10:06:04 -0700 (PDT) Reply-To: Sean Christopherson Date: Thu, 6 Aug 2026 10:06:00 -0700 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 X-Mailer: git-send-email 2.55.0.679.g6767b8d81c-goog Message-ID: <20260806170602.4112602-1-seanjc@google.com> Subject: [PATCH v2 0/2] KVM: TDX: INIT_MEM_REGION fixes From: Sean Christopherson To: Sean Christopherson , Paolo Bonzini Cc: kvm@vger.kernel.org, linux-kernel@vger.kernel.org, Sashiko Bot , Yan Zhao , Binbin Wu , Ackerley Tng , Haotian Jiang Content-Type: text/plain; charset="UTF-8" I completely lost track of this, meant to post these patches weeks ago. Compile tested only. v2: - Fix an off-by-one bug. - Use gpa_t instead of raw u64. - Tweak the order of checks to bundle similar checks together, and to perform the super basic checks (alignment, size, etc.) first. v1: https://lore.kernel.org/all/ak0skG064rhKUC8d@google.com Haotian Jiang (1): KVM: TDX: Reject INIT_MEM_REGION if number of bytes would overflow a u64 Sean Christopherson (1): KVM: TDX: Fix a benign off-by-one bug on the end GPA for INIT_MEM_REGION arch/x86/kvm/vmx/tdx.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) base-commit: a806d364ef288a6443a1337820ea8410a7ccc6b3 -- 2.55.0.679.g6767b8d81c-goog