RE: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-19 Thread Han, Weidong
Ingo Molnar wrote: > * Han, Weidong wrote: > >> Ingo Molnar wrote: >>> * Han, Weidong wrote: >>> Siddha, Suresh B wrote: > On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: >> @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct >> a

Re: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-19 Thread Ingo Molnar
* Han, Weidong wrote: > Ingo Molnar wrote: > > * Han, Weidong wrote: > > > >> Siddha, Suresh B wrote: > >>> On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: > @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct > acpi_dmar_header *header

RE: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-18 Thread Han, Weidong
Ingo Molnar wrote: > * Han, Weidong wrote: > >> Siddha, Suresh B wrote: >>> On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct acpi_dmar_header *header, " 0x%Lx\n",

Re: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-11 Thread Ingo Molnar
* Han, Weidong wrote: > Siddha, Suresh B wrote: > > On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: > >> @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct > >> acpi_dmar_header *header, " 0x%Lx\n", > >> scope->enumeration_id,

RE: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-10 Thread Han, Weidong
Siddha, Suresh B wrote: > On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: >> @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct >> acpi_dmar_header *header, " 0x%Lx\n", >> scope->enumeration_id, drhd->address); >> >> +

Re: [PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-07 Thread Suresh Siddha
On Wed, 2009-05-06 at 23:16 -0700, Han, Weidong wrote: > @@ -634,6 +694,44 @@ static int ir_parse_ioapic_scope(struct acpi_dmar_header > *header, > " 0x%Lx\n", scope->enumeration_id, > drhd->address); > > + bus = pci_f

[PATCH 2/2] Intel-IOMMU, intr-remap: source-id checking

2009-05-06 Thread Weidong Han
To support domain-isolation usages, the platform hardware must be capable of uniquely identifying the requestor (source-id) for each interrupt message. Without source-id checking for interrupt remapping , a rouge guest/VM with assigned devices can launch interrupt attacks to bring down anothe guest