From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Cooper Subject: [PATCH 5/5] xen/ARM: Restrict access to most HVM_PARAM's Date: Wed, 5 Sep 2018 19:12:04 +0100 Message-ID: <1536171124-27053-6-git-send-email-andrew.cooper3@citrix.com> References: <1536171124-27053-1-git-send-email-andrew.cooper3@citrix.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <1536171124-27053-1-git-send-email-andrew.cooper3@citrix.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Sender: "Xen-devel" To: Xen-devel Cc: Stefano Stabellini , Wei Liu , Andrew Cooper , Julien Grall , Paul Durrant , Jan Beulich , =?UTF-8?q?Roger=20Pau=20Monn=C3=A9?= List-Id: xen-devel@lists.xenproject.org QVJNIGN1cnJlbnRseSBoYXMgbm8gcmVzdHJpY3Rpb25zIG9uIHRvb2xzdGFjayBhbmQgZ3Vlc3Qg YWNjZXNzIHRvIHRoZSBlbnRpcmUKSFZNX1BBUkFNIGJsb2NrLiAgQXMgdGhlIHBhZ2luZy9tb25p dG9yL3NoYXJpbmcgZmVhdHVyZXMgYXJlbid0IHVuZGVyIHNlY3VyaXR5CnN1cHBvcnQsIHRoaXMg ZG9lc24ndCBuZWVkIGFuIFhTQS4KClRoZSBDQUxMQkFDS19JUlEgYW5kIHtTVE9SRSxDT05TT0xF fV97UEZOLEVWVENITn0gZGV0YWlscyBleHBvc2VkIHJlYWQtb25seSB0bwp0aGUgZ3Vlc3QsIHdo aWxlIHRoZSAqX1JJTkdfUEZOIGRldGFpbHMgYXJlIHJlc3RyaWN0ZWQgdG8gb25seSB0b29sc3Rh Y2sKYWNjZXNzLiAgTm8gb3RoZXIgcGFyYW1ldGVycyBhcmUgdXNlZC4KClNpZ25lZC1vZmYtYnk6 IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+Ci0tLQpDQzogSmFuIEJl dWxpY2ggPEpCZXVsaWNoQHN1c2UuY29tPgpDQzogV2VpIExpdSA8d2VpLmxpdTJAY2l0cml4LmNv bT4KQ0M6IFJvZ2VyIFBhdSBNb25uw6kgPHJvZ2VyLnBhdUBjaXRyaXguY29tPgpDQzogUGF1bCBE dXJyYW50IDxwYXVsLmR1cnJhbnRAY2l0cml4LmNvbT4KQ0M6IFN0ZWZhbm8gU3RhYmVsbGluaSA8 c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KQ0M6IEp1bGllbiBHcmFsbCA8anVsaWVuLmdyYWxsQGFy bS5jb20+CgpUaGlzIGlzIG9ubHkgY29tcGlsZSB0ZXN0ZWQsIGFuZCBiYXNlZCBvbiBteSByZWFk aW5nIG9mIHRoZSBzb3VyY2UuICBUaGVyZQptaWdodCBiZSBvdGhlciBQQVJBTVMgbmVlZGluZyBp bmNsdWRpbmcuCi0tLQogeGVuL2FyY2gvYXJtL2h2bS5jIHwgNjIgKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrLS0tCiAxIGZpbGUgY2hhbmdlZCwgNTkg aW5zZXJ0aW9ucygrKSwgMyBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vYXJjaC9hcm0v aHZtLmMgYi94ZW4vYXJjaC9hcm0vaHZtLmMKaW5kZXggNzZiMjdjOS4uMzU4MWJhMiAxMDA2NDQK LS0tIGEveGVuL2FyY2gvYXJtL2h2bS5jCisrKyBiL3hlbi9hcmNoL2FybS9odm0uYwpAQCAtMzEs NiArMzEsNTcgQEAKIAogI2luY2x1ZGUgPGFzbS9oeXBlcmNhbGwuaD4KIAorc3RhdGljIGludCBo dm1fYWxsb3dfc2V0X3BhcmFtKGNvbnN0IHN0cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGludCBw YXJhbSkKK3sKKyAgICBzd2l0Y2ggKCBwYXJhbSApCisgICAgeworICAgICAgICAvKgorICAgICAg ICAgKiBUaGUgZm9sbG93aW5nIHBhcmFtZXRlcnMgYXJlIGludGVuZGVkIGZvciB0b29sc3RhY2sg dXNhZ2Ugb25seS4KKyAgICAgICAgICogVGhleSBtYXkgbm90IGJlIHNldCBieSB0aGUgZG9tYWlu LgorICAgICAgICAgKi8KKyAgICBjYXNlIEhWTV9QQVJBTV9DQUxMQkFDS19JUlE6CisgICAgY2Fz ZSBIVk1fUEFSQU1fU1RPUkVfUEZOOgorICAgIGNhc2UgSFZNX1BBUkFNX1NUT1JFX0VWVENITjoK KyAgICBjYXNlIEhWTV9QQVJBTV9DT05TT0xFX1BGTjoKKyAgICBjYXNlIEhWTV9QQVJBTV9DT05T T0xFX0VWVENITjoKKyAgICBjYXNlIEhWTV9QQVJBTV9QQUdJTkdfUklOR19QRk46CisgICAgY2Fz ZSBIVk1fUEFSQU1fTU9OSVRPUl9SSU5HX1BGTjoKKyAgICBjYXNlIEhWTV9QQVJBTV9TSEFSSU5H X1JJTkdfUEZOOgorICAgICAgICByZXR1cm4gZCA9PSBjdXJyZW50LT5kb21haW4gPyAtRVBFUk0g OiAwOworCisgICAgICAgIC8qIFdyaXRlYWJsZSBvbmx5IGJ5IFhlbiwgaG9sZSwgZGVwcmVjYXRl ZCwgb3Igb3V0LW9mLXJhbmdlLiAqLworICAgIGRlZmF1bHQ6CisgICAgICAgIHJldHVybiAtRUlO VkFMOworICAgIH0KK30KKworc3RhdGljIGludCBodm1fYWxsb3dfZ2V0X3BhcmFtKGNvbnN0IHN0 cnVjdCBkb21haW4gKmQsIHVuc2lnbmVkIGludCBwYXJhbSkKK3sKKyAgICBzd2l0Y2ggKCBwYXJh bSApCisgICAgeworICAgICAgICAvKiBUaGUgZm9sbG93aW5nIHBhcmFtZXRlcnMgY2FuIGJlIHJl YWQgYnkgdGhlIGd1ZXN0IGFuZCB0b29sc3RhY2suICovCisgICAgY2FzZSBIVk1fUEFSQU1fQ0FM TEJBQ0tfSVJROgorICAgIGNhc2UgSFZNX1BBUkFNX1NUT1JFX1BGTjoKKyAgICBjYXNlIEhWTV9Q QVJBTV9TVE9SRV9FVlRDSE46CisgICAgY2FzZSBIVk1fUEFSQU1fQ09OU09MRV9QRk46CisgICAg Y2FzZSBIVk1fUEFSQU1fQ09OU09MRV9FVlRDSE46CisgICAgICAgIHJldHVybiAwOworCisgICAg ICAgIC8qCisgICAgICAgICAqIFRoZSBmb2xsb3dpbmcgcGFyYW1ldGVycyBhcmUgaW50ZW5kZWQg Zm9yIHRvb2xzdGFjayB1c2FnZSBvbmx5LgorICAgICAgICAgKiBUaGV5IG1heSBub3QgYmUgcmVh ZCBieSB0aGUgZG9tYWluLgorICAgICAgICAgKi8KKyAgICBjYXNlIEhWTV9QQVJBTV9QQUdJTkdf UklOR19QRk46CisgICAgY2FzZSBIVk1fUEFSQU1fTU9OSVRPUl9SSU5HX1BGTjoKKyAgICBjYXNl IEhWTV9QQVJBTV9TSEFSSU5HX1JJTkdfUEZOOgorICAgICAgICByZXR1cm4gZCA9PSBjdXJyZW50 LT5kb21haW4gPyAtRVBFUk0gOiAwOworCisgICAgICAgIC8qIEhvbGUsIGRlcHJlY2F0ZWQsIG9y IG91dC1vZi1yYW5nZS4gKi8KKyAgICBkZWZhdWx0OgorICAgICAgICByZXR1cm4gLUVJTlZBTDsK KyAgICB9Cit9CisKIGxvbmcgZG9faHZtX29wKHVuc2lnbmVkIGxvbmcgb3AsIFhFTl9HVUVTVF9I QU5ETEVfUEFSQU0odm9pZCkgYXJnKQogewogICAgIGxvbmcgcmMgPSAwOwpAQCAtNDYsOSArOTcs NiBAQCBsb25nIGRvX2h2bV9vcCh1bnNpZ25lZCBsb25nIG9wLCBYRU5fR1VFU1RfSEFORExFX1BB UkFNKHZvaWQpIGFyZykKICAgICAgICAgaWYgKCBjb3B5X2Zyb21fZ3Vlc3QoJmEsIGFyZywgMSkg KQogICAgICAgICAgICAgcmV0dXJuIC1FRkFVTFQ7CiAKLSAgICAgICAgaWYgKCBhLmluZGV4ID49 IEhWTV9OUl9QQVJBTVMgKQotICAgICAgICAgICAgcmV0dXJuIC1FSU5WQUw7Ci0KICAgICAgICAg ZCA9IHJjdV9sb2NrX2RvbWFpbl9ieV9hbnlfaWQoYS5kb21pZCk7CiAgICAgICAgIGlmICggZCA9 PSBOVUxMICkKICAgICAgICAgICAgIHJldHVybiAtRVNSQ0g7CkBAIC01OSwxMCArMTA3LDE4IEBA IGxvbmcgZG9faHZtX29wKHVuc2lnbmVkIGxvbmcgb3AsIFhFTl9HVUVTVF9IQU5ETEVfUEFSQU0o dm9pZCkgYXJnKQogCiAgICAgICAgIGlmICggb3AgPT0gSFZNT1Bfc2V0X3BhcmFtICkKICAgICAg ICAgeworICAgICAgICAgICAgcmMgPSBodm1fYWxsb3dfc2V0X3BhcmFtKGQsIGEuaW5kZXgpOwor ICAgICAgICAgICAgaWYgKCByYyApCisgICAgICAgICAgICAgICAgZ290byBwYXJhbV9mYWlsOwor CiAgICAgICAgICAgICBkLT5hcmNoLmh2bS5wYXJhbXNbYS5pbmRleF0gPSBhLnZhbHVlOwogICAg ICAgICB9CiAgICAgICAgIGVsc2UKICAgICAgICAgeworICAgICAgICAgICAgcmMgPSBodm1fYWxs b3dfZ2V0X3BhcmFtKGQsIGEuaW5kZXgpOworICAgICAgICAgICAgaWYgKCByYyApCisgICAgICAg ICAgICAgICAgZ290byBwYXJhbV9mYWlsOworCiAgICAgICAgICAgICBhLnZhbHVlID0gZC0+YXJj aC5odm0ucGFyYW1zW2EuaW5kZXhdOwogICAgICAgICAgICAgcmMgPSBjb3B5X3RvX2d1ZXN0KGFy ZywgJmEsIDEpID8gLUVGQVVMVCA6IDA7CiAgICAgICAgIH0KLS0gCjIuMS40CgoKX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVsIG1haWxpbmcg bGlzdApYZW4tZGV2ZWxAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9q ZWN0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3hlbi1kZXZlbA==