[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-changelog] [xen stable-4.8] x86/emul: Fix backport of "x86/emul: Fix the decoding of segment overrides in 64bit mode"

commit 08647952260725344f4e67d2190c2c4c8457cea2
Author:     Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
AuthorDate: Mon Apr 9 12:23:48 2018 +0200
Commit:     Jan Beulich <jbeulich@xxxxxxxx>
CommitDate: Mon Apr 9 12:23:48 2018 +0200

    x86/emul: Fix backport of "x86/emul: Fix the decoding of segment overrides 
in 64bit mode"
    The logic in c/s b7dce29d is correct for master, but depends on c/s 
    "x86emul: don't assume a memory operand", and in particular changed the type
    of override_seg and the constant used to signify "no override".
    When backported, the "no override in place" case causes x86_seg_none to be
    used in place of x86_seg_ds, which has implications for the correctness of
    emulated memory reads and writes.
    Problems from this manifest as a reliable failure to boot shadow guests in 
    following manner:
      (d3) [15145.989017] Press F12 for boot menu.
      (d3) [15145.989730]
      (d3) [15146.000273] Boot device: CD-Rom5814MB medium detected
      (d3) [15146.013234]  - success.
      (XEN) [15146.324244] paging.c:694:d0v3 Tried to do a paging op on itself.
      (XEN) [15204.719457] sh error: sh_remove_shadows(): can't find all 
shadows of mfn 112cd54 (shadow_flags=00002000)
      (XEN) [15204.719462] domain_crash called from common.c:2884
      (XEN) [15204.719466] Domain 3 (vcpu#0) crashed on cpu#31:
    Other problems with regular MMIO emulation haven't been observed, but
    shouldn't be ruled out.
    Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
    Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>
 xen/arch/x86/x86_emulate/x86_emulate.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/xen/arch/x86/x86_emulate/x86_emulate.c 
index 16a723870c..9b1d2fcbb2 100644
--- a/xen/arch/x86/x86_emulate/x86_emulate.c
+++ b/xen/arch/x86/x86_emulate/x86_emulate.c
@@ -1983,8 +1983,8 @@ x86_decode(
     /* %{e,c,s,d}s overrides are ignored in 64bit mode. */
-    if ( mode_64bit() && override_seg < x86_seg_fs )
-        override_seg = x86_seg_none;
+    if ( mode_64bit() && (unsigned int)override_seg < x86_seg_fs )
+        override_seg = -1;
     if ( rex_prefix & REX_W )
         op_bytes = 8;
generated by git-patchbot for /home/xen/git/xen.git#stable-4.8

Xen-changelog mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.