Re: [Xen-devel] domU crashing Xen

[Keir Fraser <Keir.Fraser@xxxxxxxxxxxx>]

On 12/10/06 07:26, "Chris Wright" <chrisw@xxxxxxxxxxxx> wrote:

> Haven't worked out exactly what's causing the bug, but in testing the
> pv_ops tree against current Xen (11736:f7d65fb7299b) I can reliably
> crash Xen with the following trace, caused by:
> 
> arch/x86/traps.c::handle_gdt_ldt_mapping_fault()
>     ...
>     /* Should never fault in another vcpu's area. */
>     BUG_ON(vcpu_area != current->vcpu_id);

The shadow-refcount code is quite fresh. We should confirm this isn't
exploitable by ordinary PV guests though.

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel