Re: [PATCH v7 2/2] i386: Add notify VM exit support

2022-09-27 Thread Paolo Bonzini
Il mer 28 set 2022, 04:21 Chenyi Qiang ha scritto: > >> +warn_report_once("KVM: encounter a notify exit with %svalid > >> context in" > >> + " guest. It means there can be possible > >> misbehaves in" > >> + " guest, please have a look.", >

Re: [PATCH v7 2/2] i386: Add notify VM exit support

2022-09-27 Thread Chenyi Qiang
On 9/27/2022 9:43 PM, Paolo Bonzini wrote: On 9/23/22 09:33, Chenyi Qiang wrote: Because there are some concerns, e.g. a notify VM exit may happen with VM_CONTEXT_INVALID set in exit qualification (no cases are anticipated that would set this bit), which means VM context is corrupted. To

Re: [PATCH v7 2/2] i386: Add notify VM exit support

2022-09-27 Thread Paolo Bonzini
On 9/23/22 09:33, Chenyi Qiang wrote: Because there are some concerns, e.g. a notify VM exit may happen with VM_CONTEXT_INVALID set in exit qualification (no cases are anticipated that would set this bit), which means VM context is corrupted. To avoid the false positive and a well-behaved guest

[PATCH v7 2/2] i386: Add notify VM exit support

2022-09-23 Thread Chenyi Qiang
There are cases that malicious virtual machine can cause CPU stuck (due to event windows don't open up), e.g., infinite loop in microcode when nested #AC (CVE-2015-5307). No event window means no event (NMI, SMI and IRQ) can be delivered. It leads the CPU to be unavailable to host or other VMs.