From: Ingo Molnar <[EMAIL PROTECTED]>
Subject: [patch] kvm: make cr3 loading more robust

rmap_write_protect() has a BUG_ON() if a physical address is not found 
the the memslot. But this is a possible scenario if a buggy guest OS 
loads an invalid or corrupted cr3 value. So exit more gracefully.

[ Avi: this patch needs kvm_mmu_get_page() NULL return to not be ignored 
  by mmu_alloc_roots()/nonpaging_init_context()/paging_new_cr3()/etc. 
  and passed further down - i assume you are working on those
  issues already, or should i fix those too? ]

Signed-off-by: Ingo Molnar <[EMAIL PROTECTED]>

Index: linux/drivers/kvm/mmu.c
===================================================================
--- linux.orig/drivers/kvm/mmu.c
+++ linux/drivers/kvm/mmu.c
@@ -378,7 +378,7 @@ static void rmap_remove(struct kvm_vcpu 
        }
 }
 
-static void rmap_write_protect(struct kvm_vcpu *vcpu, u64 gfn)
+static int rmap_write_protect(struct kvm_vcpu *vcpu, u64 gfn)
 {
        struct kvm *kvm = vcpu->kvm;
        struct page *page;
@@ -387,7 +387,8 @@ static void rmap_write_protect(struct kv
        u64 *spte;
 
        slot = gfn_to_memslot(kvm, gfn);
-       BUG_ON(!slot);
+       if (!slot)
+               return -1;
        page = gfn_to_page(slot, gfn);
 
        while (page->private) {
@@ -407,6 +408,7 @@ static void rmap_write_protect(struct kv
                kvm_arch_ops->tlb_flush(vcpu);
                *spte &= ~(u64)PT_WRITABLE_MASK;
        }
+       return 0;
 }
 
 static int is_empty_shadow_page(hpa_t page_hpa)
@@ -592,12 +594,17 @@ static struct kvm_mmu_page *kvm_mmu_get_
        page = kvm_mmu_alloc_page(vcpu, parent_pte);
        if (!page)
                return page;
+       if (!metaphysical) {
+               if (rmap_write_protect(vcpu, gfn) < 0) {
+                       kvm_mmu_free_page(vcpu, page->page_hpa);
+                       return NULL;
+               }
+       }
        pgprintk("%s: adding gfn %lx role %x\n", __FUNCTION__, gfn, role.word);
        page->gfn = gfn;
        page->role = role;
        hlist_add_head(&page->hash_link, bucket);
-       if (!metaphysical)
-               rmap_write_protect(vcpu, gfn);
+
        return page;
 }
 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
kvm-devel mailing list
kvm-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/kvm-devel

Reply via email to