On 05/11/2020 23:10, Elliott Mitchell wrote:
This code path only exists with CONFIG_DEBUG=y which is not security supported.On Thu, Nov 05, 2020 at 10:31:06PM +0000, Julien Grall wrote:Even if debug trap are only meant for debugging purpose, it is quite harsh to crash Xen if one of the trap sent by the guest is not handled. So switch from a panic() to a printk().Might this qualify as security due to potential DoS?
Cheers, -- Julien Grall