On Thu, Nov 07, 2013 at 04:07:34PM +0100, Paolo Bonzini wrote: > Il 07/11/2013 16:05, Michael S. Tsirkin ha scritto: > >> > So, ack for patch 5-7-8, which should also be enough to fix the problem > >> > that Luiz reported. > > Not at all. As long as exec.c ignores high bits, any access > > there will end up in the wrong region. > > ... unless it happens to be the correct region because the whole > 2^64-bit range is covered by a single region. This is what happens for > IOMMUs. > > Paolo
Only if you are lucky. What makes sure ignoring high bits does not hit the e1000 MMIO? Nothing I think. > > We might not get a crash but we'll get guest memory corruption.
