|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [xen-4.12-testing bisection] complete test-amd64-amd64-qemuu-nested-intel
branch xen-4.12-testing xenbranch xen-4.12-testing job test-amd64-amd64-qemuu-nested-intel testid debian-hvm-install/l1/l2 Tree: linux git://xenbits.xen.org/linux-pvops.git Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git Tree: qemuu git://xenbits.xen.org/qemu-xen.git Tree: seabios git://xenbits.xen.org/osstest/seabios.git Tree: xen git://xenbits.xen.org/xen.git *** Found and reproduced problem changeset *** Bug is in tree: xen git://xenbits.xen.org/xen.git Bug introduced: 7f10403b11e631eeb7a1d4c46415fb428f389dc9 Bug not present: b29848bd0fe4bccdd787084257992f1166abc249 Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144148/ commit 7f10403b11e631eeb7a1d4c46415fb428f389dc9 Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Date: Thu Dec 20 17:25:29 2018 +0000 x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207 CVE-2018-12207 covers a set of errata on various Intel processors, whereby a machine check exception can be generated in a corner case when an executable mapping changes size or cacheability without TLB invalidation. HVM guest kernels can trigger this to DoS the host. To mitigate, in affected hardware, all EPT superpages are marked NX. When an instruction fetch violation is observed against the superpage, the superpage is shattered to 4k and has execute permissions restored. This prevents the guest kernel from being able to create the necessary preconditions in the iTLB to exploit the vulnerability. This does come with a workload-dependent performance overhead, caused by increased TLB pressure. Performance can be restored, if guest kernels are trusted not to mount an attack, by specifying ept=exec-sp on the command line. This is part of XSA-304 / CVE-2018-12207 Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx> For bisection revision-tuple graph see: http://logs.test-lab.xenproject.org/osstest/results/bisect/xen-4.12-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.html Revision IDs in each graph node refer, respectively, to the Trees above. ---------------------------------------- Running cs-bisection-step --graph-out=/home/logs/results/bisect/xen-4.12-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2 --summary-out=tmp/144148.bisection-summary --basis-template=144035 --blessings=real,real-bisect xen-4.12-testing test-amd64-amd64-qemuu-nested-intel debian-hvm-install/l1/l2 Searching for failure / basis pass: 144109 fail [host=baroque0] / 144035 [host=fiano0] 144007 [host=elbling0] 143996 [host=huxelrebe1] 143980 [host=elbling1] 143955 [host=godello1] 143922 [host=huxelrebe0] 143851 [host=godello0] 143677 [host=fiano1] 143577 [host=chardonnay0] 143458 [host=albana0] 143371 [host=italia0] 143302 ok. Failure / basis pass flights: 144109 / 143302 (tree with no url: minios) Tree: linux git://xenbits.xen.org/linux-pvops.git Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git Tree: qemuu git://xenbits.xen.org/qemu-xen.git Tree: seabios git://xenbits.xen.org/osstest/seabios.git Tree: xen git://xenbits.xen.org/xen.git Latest b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 c801f33d818b8010fabb93092c661c6f30d42b13 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 3bdd2b77656124e3fa7693fbfd7a06f74c38eb87 0138da196c8c334589a25144d4d69bf6553e2658 Basis pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 9e639c1cb6abd5ffed0f9017de26f93d2ee99eac d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 120996f147131eca8af90e30c900bc14bc824d9f e28f7d60d5b5b25437a97ecc655e73eb2f1d05eb Generating revisions with ./adhoc-revtuple-generator git://xenbits.xen.org/linux-pvops.git#b98aebd298246df37b472c52a2ee1023256d02e3-b98aebd298246df37b472c52a2ee1023256d02e3 git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860 git://xenbits.xen.org/osstest/ovmf.git#9e639c1cb6abd5ffed0f9017de26f93d2ee99eac-c801f33d818b8010fabb93092c661c6f30d42b13 git://xenbits.xen.org/qemu-xen-traditional.git#d0d8ad39ecb51cd7497cd524484\ fe09f50876798-d0d8ad39ecb51cd7497cd524484fe09f50876798 git://xenbits.xen.org/qemu-xen.git#8023a62081ffbe3f734019076ec1a2b4213142bb-8023a62081ffbe3f734019076ec1a2b4213142bb git://xenbits.xen.org/osstest/seabios.git#120996f147131eca8af90e30c900bc14bc824d9f-3bdd2b77656124e3fa7693fbfd7a06f74c38eb87 git://xenbits.xen.org/xen.git#e28f7d60d5b5b25437a97ecc655e73eb2f1d05eb-0138da196c8c334589a25144d4d69bf6553e2658 Use of uninitialized value $parents in array dereference at ./adhoc-revtuple-generator line 465. Use of uninitialized value in concatenation (.) or string at ./adhoc-revtuple-generator line 465. Loaded 12521 nodes in revision graph Searching for test results: 143302 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 9e639c1cb6abd5ffed0f9017de26f93d2ee99eac d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 120996f147131eca8af90e30c900bc14bc824d9f e28f7d60d5b5b25437a97ecc655e73eb2f1d05eb 143371 [host=italia0] 143458 [host=albana0] 143577 [host=chardonnay0] 143677 [host=fiano1] 143851 [host=godello0] 143955 [host=godello1] 143922 [host=huxelrebe0] 143980 [host=elbling1] 143996 [host=huxelrebe1] 144007 [host=elbling0] 144035 [host=fiano0] 144059 fail irrelevant 144078 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 0138da196c8c334589a25144d4d69bf6553e2658 144104 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 8bc648fe6c10c1f94a7ee73bd38b65a0122de12f d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 278e46ae8f99485915ae662e7905c8333a55048a 144125 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 278e46ae8f99485915ae662e7905c8333a55048a 144109 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 c801f33d818b8010fabb93092c661c6f30d42b13 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 3bdd2b77656124e3fa7693fbfd7a06f74c38eb87 0138da196c8c334589a25144d4d69bf6553e2658 144111 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 9e639c1cb6abd5ffed0f9017de26f93d2ee99eac d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 120996f147131eca8af90e30c900bc14bc824d9f e28f7d60d5b5b25437a97ecc655e73eb2f1d05eb 144077 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 9e639c1cb6abd5ffed0f9017de26f93d2ee99eac d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 120996f147131eca8af90e30c900bc14bc824d9f e28f7d60d5b5b25437a97ecc655e73eb2f1d05eb 144148 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 7f10403b11e631eeb7a1d4c46415fb428f389dc9 144095 fail irrelevant 144139 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c b29848bd0fe4bccdd787084257992f1166abc249 144098 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 106369fe26579c2c97131c3dd9e7c7332a5ec575 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb c1ab7d7ed5306641784a9ed8972db5151a49a1a1 278e46ae8f99485915ae662e7905c8333a55048a 144102 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 f9d0e5daa058f0cf4caa8edad0dfa2a3a390f1b0 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 278e46ae8f99485915ae662e7905c8333a55048a 144114 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 0138da196c8c334589a25144d4d69bf6553e2658 144129 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 7f10403b11e631eeb7a1d4c46415fb428f389dc9 144121 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4eb2baba9343624e366032697049a713bdaef369 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 278e46ae8f99485915ae662e7905c8333a55048a 144142 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 c801f33d818b8010fabb93092c661c6f30d42b13 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 3bdd2b77656124e3fa7693fbfd7a06f74c38eb87 0138da196c8c334589a25144d4d69bf6553e2658 144134 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c b29848bd0fe4bccdd787084257992f1166abc249 144135 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 7f10403b11e631eeb7a1d4c46415fb428f389dc9 144145 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c 7f10403b11e631eeb7a1d4c46415fb428f389dc9 144147 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c b29848bd0fe4bccdd787084257992f1166abc249 Searching for interesting versions Result found: flight 143302 (pass), for basis pass Result found: flight 144109 (fail), for basis failure Repro found: flight 144111 (pass), for basis pass Repro found: flight 144142 (fail), for basis failure 0 revisions at b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 d0d8ad39ecb51cd7497cd524484fe09f50876798 8023a62081ffbe3f734019076ec1a2b4213142bb 9caa19be0e534c687081fbdfcd301406e728c98c b29848bd0fe4bccdd787084257992f1166abc249 No revisions left to test, checking graph state. Result found: flight 144134 (pass), for last pass Result found: flight 144135 (fail), for first failure Repro found: flight 144139 (pass), for last pass Repro found: flight 144145 (fail), for first failure Repro found: flight 144147 (pass), for last pass Repro found: flight 144148 (fail), for first failure *** Found and reproduced problem changeset *** Bug is in tree: xen git://xenbits.xen.org/xen.git Bug introduced: 7f10403b11e631eeb7a1d4c46415fb428f389dc9 Bug not present: b29848bd0fe4bccdd787084257992f1166abc249 Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144148/ commit 7f10403b11e631eeb7a1d4c46415fb428f389dc9 Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Date: Thu Dec 20 17:25:29 2018 +0000 x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207 CVE-2018-12207 covers a set of errata on various Intel processors, whereby a machine check exception can be generated in a corner case when an executable mapping changes size or cacheability without TLB invalidation. HVM guest kernels can trigger this to DoS the host. To mitigate, in affected hardware, all EPT superpages are marked NX. When an instruction fetch violation is observed against the superpage, the superpage is shattered to 4k and has execute permissions restored. This prevents the guest kernel from being able to create the necessary preconditions in the iTLB to exploit the vulnerability. This does come with a workload-dependent performance overhead, caused by increased TLB pressure. Performance can be restored, if guest kernels are trusted not to mount an attack, by specifying ept=exec-sp on the command line. This is part of XSA-304 / CVE-2018-12207 Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx> Revision graph left in /home/logs/results/bisect/xen-4.12-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.{dot,ps,png,html,svg}. ---------------------------------------- 144148: tolerable ALL FAIL flight 144148 xen-4.12-testing real-bisect [real] http://logs.test-lab.xenproject.org/osstest/logs/144148/ Failures :-/ but no regressions. Tests which did not succeed, including tests which could not be run: test-amd64-amd64-qemuu-nested-intel 17 debian-hvm-install/l1/l2 fail baseline untested jobs: test-amd64-amd64-qemuu-nested-intel fail ------------------------------------------------------------ sg-report-flight on osstest.test-lab.xenproject.org logs: /home/logs/logs images: /home/logs/images Logs, config files, etc. are available at http://logs.test-lab.xenproject.org/osstest/logs Explanation of these reports, and of osstest in general, is at http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master Test harness code can be found at http://xenbits.xen.org/gitweb?p=osstest.git;a=summary _______________________________________________ osstest-output mailing list osstest-output@xxxxxxxxxxxxxxxxxxxx https://lists.xenproject.org/mailman/listinfo/osstest-output
|
 |
Lists.xenproject.org is hosted with RackSpace, monitoring our |