Re: [Qemu-devel] [PATCH][XSA-126] xen: limit guest control of PCI command register

2015-04-09 Thread Peter Maydell
On 31 March 2015 at 15:18, Stefano Stabellini wrote: > From: Jan Beulich > > Otherwise the guest can abuse that control to cause e.g. PCIe > Unsupported Request responses (by disabling memory and/or I/O decoding > and subsequently causing [CPU side] accesses to the respective address > ranges), w

Re: [Qemu-devel] [PATCH][XSA-126] xen: limit guest control of PCI command register

2015-04-01 Thread Michael S. Tsirkin
On Wed, Apr 01, 2015 at 10:20:06AM +0100, Stefano Stabellini wrote: > CC'ing the author of the patch and xen-devel. > FYI I think that Jan is going to be on vacation for a couple of weeks. > > On Wed, 1 Apr 2015, Michael S. Tsirkin wrote: > > On Tue, Mar 31, 2015 at 03:18:03PM +0100, Stefano Stabe

Re: [Qemu-devel] [PATCH][XSA-126] xen: limit guest control of PCI command register

2015-04-01 Thread Stefano Stabellini
CC'ing the author of the patch and xen-devel. FYI I think that Jan is going to be on vacation for a couple of weeks. On Wed, 1 Apr 2015, Michael S. Tsirkin wrote: > On Tue, Mar 31, 2015 at 03:18:03PM +0100, Stefano Stabellini wrote: > > From: Jan Beulich > > > > Otherwise the guest can abuse tha

Re: [Qemu-devel] [PATCH][XSA-126] xen: limit guest control of PCI command register

2015-04-01 Thread Michael S. Tsirkin
On Tue, Mar 31, 2015 at 03:18:03PM +0100, Stefano Stabellini wrote: > From: Jan Beulich > > Otherwise the guest can abuse that control to cause e.g. PCIe > Unsupported Request responses (by disabling memory and/or I/O decoding > and subsequently causing [CPU side] accesses to the respective addre

[Qemu-devel] [PATCH][XSA-126] xen: limit guest control of PCI command register

2015-03-31 Thread Stefano Stabellini
From: Jan Beulich Otherwise the guest can abuse that control to cause e.g. PCIe Unsupported Request responses (by disabling memory and/or I/O decoding and subsequently causing [CPU side] accesses to the respective address ranges), which (depending on system configuration) may be fatal to the host