Re: [Xen-devel] [PATCH] x86/VT-x: Don't activate VMCS Shadowing outside of nested vmx mode

2018-12-12 Thread Tian, Kevin
> From: Andrew Cooper [mailto:andrew.coop...@citrix.com] > Sent: Saturday, December 8, 2018 4:07 AM > nested vmx mode > > By default on capable hardware, > SECONDARY_EXEC_ENABLE_VMCS_SHADOWING is > activated unilaterally. The VMCS Link pointer is initialised to ~0, but the > VMREAD/VMWRITE

Re: [Xen-devel] [PATCH] x86/VT-x: Don't activate VMCS Shadowing outside of nested vmx mode

2018-12-10 Thread Andrew Cooper
On 10/12/2018 16:01, Jan Beulich wrote: On 07.12.18 at 21:07, wrote: >> By default on capable hardware, SECONDARY_EXEC_ENABLE_VMCS_SHADOWING is >> activated unilaterally. The VMCS Link pointer is initialised to ~0, but the >> VMREAD/VMWRITE bitmap pointers are not. >> >> This causes the

Re: [Xen-devel] [PATCH] x86/VT-x: Don't activate VMCS Shadowing outside of nested vmx mode

2018-12-10 Thread Jan Beulich
>>> On 07.12.18 at 21:07, wrote: > By default on capable hardware, SECONDARY_EXEC_ENABLE_VMCS_SHADOWING is > activated unilaterally. The VMCS Link pointer is initialised to ~0, but the > VMREAD/VMWRITE bitmap pointers are not. > > This causes the 16bit IVT and Bios Data Area get interpreted as

[Xen-devel] [PATCH] x86/VT-x: Don't activate VMCS Shadowing outside of nested vmx mode

2018-12-07 Thread Andrew Cooper
By default on capable hardware, SECONDARY_EXEC_ENABLE_VMCS_SHADOWING is activated unilaterally. The VMCS Link pointer is initialised to ~0, but the VMREAD/VMWRITE bitmap pointers are not. This causes the 16bit IVT and Bios Data Area get interpreted as the read/write permission bitmap for guests