Re: [Xen-devel] XSA-60 solutions

[Tim Deegan <tim@xxxxxxx>]

At 12:40 +0100 on 09 Oct (1381322425), Jan Beulich wrote:
> >>> On 09.10.13 at 12:41, "Liu, Jinsong" <jinsong.liu@xxxxxxxxx> wrote:
> > Another point is, for shadow, currently Xen drop all shadows so that any 
> > new 
> > ones would be created on demand with UC. It works safely for XSA-60, but 
> > seems 
> > not good enough. We can still use IA32_PAT to solve it, not touch shadow 
> > page 
> > table itself.
> 
> Tim, any though on this?

The existing shadow solution is OK, I think -- but if the same solution
that's used for EPT can be applied there, so much the better.

Tim.

> > One thing I need more confirm from AMD side: iirc, AMD IOMMU always works 
> > with snooped so cache cohernecy has been guaranteed, so no need do anything 
> > for guest cr0.cd setting, no matter shadow or NPT, right? If yes, most code 
> > could be done w/ Intel specific.
> 
> Iirc SVM allows the guest to run with CR0.CD set. Whether that's
> entirely valid to do I'm not certain, but I suppose it's at least to some
> degree due to the major inhibiting factor (hyperthreads) not existing
> there.
> 
> Jan
> 
> 
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@xxxxxxxxxxxxx
> http://lists.xen.org/xen-devel

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel