Branch: refs/heads/master
  Home:   https://github.com/siemens/jailhouse
  Commit: a6d8decf371dc5560a335ab9c03781e3f2387dcc
      
https://github.com/siemens/jailhouse/commit/a6d8decf371dc5560a335ab9c03781e3f2387dcc
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-21 (Tue, 21 Jan 2020)

  Changed paths:
    M hypervisor/arch/arm-common/mmu_cell.c
    M hypervisor/arch/x86/svm.c
    M hypervisor/arch/x86/vmx.c
    M hypervisor/arch/x86/vtd.c
    M hypervisor/include/jailhouse/paging.h
    M hypervisor/paging.c

  Log Message:
  -----------
  core: paging: Refactor paging_create/destroy parameters

Change the coherent enum into paging_flags in order to allow adding more
in the future. Rename the flags parameter to access_flags for better
differentiation.

Use this chance to align the names and types of local vars that are
forwarded to access_flags with that parameter.

No behavioral changes.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: b310eaa9c02509a04ad2db0808bd66d7884747ca
      
https://github.com/siemens/jailhouse/commit/b310eaa9c02509a04ad2db0808bd66d7884747ca
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M hypervisor/arch/arm-common/gic-v2.c
    M hypervisor/arch/arm-common/mmu_cell.c
    M hypervisor/arch/arm-common/setup.c
    M hypervisor/arch/arm/mmu_hyp.c
    M hypervisor/arch/arm64/setup.c
    M hypervisor/arch/x86/svm.c
    M hypervisor/arch/x86/vcpu.c
    M hypervisor/arch/x86/vmx.c
    M hypervisor/arch/x86/vtd.c
    M hypervisor/include/jailhouse/paging.h
    M hypervisor/ivshmem.c
    M hypervisor/mmio.c
    M hypervisor/paging.c
    M hypervisor/setup.c
    M include/jailhouse/cell-config.h

  Log Message:
  -----------
  core: Introduce JAILHOUSE_MEM_NO_HUGEPAGES memory region flag

This allows to mitigate CVE-2018-12207: On affected Intel machines, a
guest can trigger an unrecoverable machine check exception when running
a certain code pattern on an executable huge page. The suggested
mitigation pattern of Intel involves on-demand break-up of huge pages
when the guest tries to execute on them and also consolidating them into
non-executable huge pages dynamically. This pattern is not compatible
with the static and deterministic behavior of Jailhouse.

Therefore, this introduces a memory region flag to exclude huge page
mappings for a region. System configurators can use this flag for
executable regions on affected CPUs, while still allowing huge pages for
non-executable regions.

PAGING_HUGE/NO_HUGE is consistently applied to all caller of
paging_create, using NO_HUGE in case only a size known to be smaller
than a huge page is requested.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 2f21dba72fdb3fd430c10cc8befa82c9a4a01efe
      
https://github.com/siemens/jailhouse/commit/2f21dba72fdb3fd430c10cc8befa82c9a4a01efe
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M include/jailhouse/hypercall.h

  Log Message:
  -----------
  core: Tune comm region's flags field definition and documentation

This field is static, thus volatile is not appropriate. Rephrase the
field and flags documentation for a clearer wording.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 859c6fa5f6454d5f3a58df9a6fc82dee21829fdf
      
https://github.com/siemens/jailhouse/commit/859c6fa5f6454d5f3a58df9a6fc82dee21829fdf
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M include/arch/arm-common/asm/jailhouse_hypercall.h

  Log Message:
  -----------
  arm/arm64: Pad comm region to natural alignment

Better pad than rely on both sides using the same compiler logic.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 4381dda62383cd32f23b1b7a053483ae1d333535
      
https://github.com/siemens/jailhouse/commit/4381dda62383cd32f23b1b7a053483ae1d333535
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M include/arch/arm/asm/jailhouse_hypercall.h
    M include/arch/arm64/asm/jailhouse_hypercall.h
    M include/arch/x86/asm/jailhouse_hypercall.h

  Log Message:
  -----------
  core: Mark jailhouse_comm_region as packed

Ensure that we do not deviate in alignments, even if the currently
achieved natural one should once be violated.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: f9ac6fa0c3bb207b0fcc1c328bd9e22eced9acfe
      
https://github.com/siemens/jailhouse/commit/f9ac6fa0c3bb207b0fcc1c328bd9e22eced9acfe
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M Documentation/hypervisor-interfaces.txt

  Log Message:
  -----------
  Documentation: Update hypervisor interfaces specification

Lots of things changed since the file was last touched. Add the
hypercall ABIs for non-Intel-x86, update the "CPU Get Info" hypercall
with new statistic types, and extend the Comm Region description with
the console and non-x86 extensions added meanwhile.

Signed-off-by: Jan Kiszka <[email protected]>
Reviewed-by: Ralf Ramsauer <[email protected]>


  Commit: 77a41ea5a2cddf814985961c3cde6a064ccd34e4
      
https://github.com/siemens/jailhouse/commit/77a41ea5a2cddf814985961c3cde6a064ccd34e4
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M TODO.md

  Log Message:
  -----------
  TODO: Update

Add an entry about VT-d modernization, refine the SMMU to-do now that v3
is available, and drop big-endian - not relevant on ARM in the
foreseeable future.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 8c51dd45ad98f71e693d98b89dd85e45ab10c069
      
https://github.com/siemens/jailhouse/commit/8c51dd45ad98f71e693d98b89dd85e45ab10c069
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-27 (Mon, 27 Jan 2020)

  Changed paths:
    M include/arch/arm-common/asm/jailhouse_hypercall.h
    M include/arch/arm/asm/jailhouse_hypercall.h
    M include/arch/arm64/asm/jailhouse_hypercall.h

  Log Message:
  -----------
  arm/arm64: Factor out more common parts of jailhouse_hypercall.h

JAILHOUSE_HVC_CODE is the same, most of the JAILHOUSE_CPU_STAT_VMEXITS_*
are, and when we move struct jailhouse_comm_region, we can save
COMM_REGION_COMMON_PLATFORM_INFO.

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 3814e3a977987a782db3e9a152dcb707e3c82e33
      
https://github.com/siemens/jailhouse/commit/3814e3a977987a782db3e9a152dcb707e3c82e33
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-29 (Wed, 29 Jan 2020)

  Changed paths:
    M configs/arm64/jetson-tx1.c
    M configs/arm64/jetson-tx2.c

  Log Message:
  -----------
  configs: arm64: Remove vmalloc from command line hint

Not needed on arm64 because it starts Jailhouse differently compared to
arm (tk1).

Signed-off-by: Jan Kiszka <[email protected]>


  Commit: 2137473830c3788f3fbca9f1e782b2dcd7c358d5
      
https://github.com/siemens/jailhouse/commit/2137473830c3788f3fbca9f1e782b2dcd7c358d5
  Author: Jan Kiszka <[email protected]>
  Date:   2020-01-30 (Thu, 30 Jan 2020)

  Changed paths:
    M configs/arm64/qemu-arm64.c

  Log Message:
  -----------
  configs: arm64: Fix comments in qemu-arm64

The device tree remark was copy&pasted, we use mem= for QEMU.

Signed-off-by: Jan Kiszka <[email protected]>


Compare: 
https://github.com/siemens/jailhouse/compare/c4024b68d0d1...2137473830c3

-- 
You received this message because you are subscribed to the Google Groups 
"Jailhouse" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jailhouse-dev/siemens/jailhouse/push/refs/heads/master/c4024b-213747%40github.com.

Reply via email to