Re: [Xen-devel] [PATCH L1TF MDS GT v2 1/2] common/grant_table: harden bound accesses

2019-07-14 Thread Jan Beulich
On 12.07.2019 10:40, Norbert Manthey wrote: > On 7/11/19 14:34, Jan Beulich wrote: >> On 10.07.2019 14:54, Norbert Manthey wrote: >>> Guests can issue grant table operations and provide guest controlled >>> data to them. This data is used as index for memory loads after bound >>> checks have been d

Re: [Xen-devel] [PATCH L1TF MDS GT v2 1/2] common/grant_table: harden bound accesses

2019-07-12 Thread Norbert Manthey
On 7/11/19 14:34, Jan Beulich wrote: > On 10.07.2019 14:54, Norbert Manthey wrote: >> Guests can issue grant table operations and provide guest controlled >> data to them. This data is used as index for memory loads after bound >> checks have been done. To avoid speculative out-of-bound accesses, w

Re: [Xen-devel] [PATCH L1TF MDS GT v2 1/2] common/grant_table: harden bound accesses

2019-07-11 Thread Jan Beulich
On 10.07.2019 14:54, Norbert Manthey wrote: > Guests can issue grant table operations and provide guest controlled > data to them. This data is used as index for memory loads after bound > checks have been done. To avoid speculative out-of-bound accesses, we > use the array_index_nospec macro where

[Xen-devel] [PATCH L1TF MDS GT v2 1/2] common/grant_table: harden bound accesses

2019-07-10 Thread Norbert Manthey
Guests can issue grant table operations and provide guest controlled data to them. This data is used as index for memory loads after bound checks have been done. To avoid speculative out-of-bound accesses, we use the array_index_nospec macro where applicable, or the macro block_speculation. Note, t