[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [xen-unstable bisection] complete test-amd64-amd64-xl-credit2



branch xen-unstable
xen branch xen-unstable
job test-amd64-amd64-xl-credit2
test guest-localmigrate

Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/staging/qemu-xen-unstable.git
Tree: qemuu git://xenbits.xen.org/staging/qemu-upstream-unstable.git
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
  Bug not present: 88a2372c6ba44dd42b915a95a823cf9d4d260e25


  commit d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
  Author: Jan Beulich <jbeulich@xxxxxxxx>
  Date:   Mon Mar 23 16:51:14 2015 +0100
  
      x86: allow 64-bit PV guest kernels to suppress user mode exposure of M2P
      
      Xen L4 entries being uniformly installed into any L4 table and 64-bit
      PV kernels running in ring 3 means that user mode was able to see the
      read-only M2P presented by Xen to the guests. While apparently not
      really representing an exploitable information leak, this still very
      certainly was never meant to be that way.
      
      Building on the fact that these guests already have separate kernel and
      user mode page tables we can allow guest kernels to tell Xen that they
      don't want user mode to see this table. We can't, however, do this by
      default: There is no ABI requirement that kernel and user mode page
      tables be separate. Therefore introduce a new VM-assist flag allowing
      the guest to control respective hypervisor behavior:
      - when not set, L4 tables get created with the respective slot blank,
        and whenever the L4 table gets used as a kernel one the missing
        mapping gets inserted,
      - when set, L4 tables get created with the respective slot initialized
        as before, and whenever the L4 table gets used as a user one the
        mapping gets zapped.
      
      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Reviewed-by: Tim Deegan <tim@xxxxxxx>


For bisection revision-tuple graph see:
   
http://www.chiark.greenend.org.uk/~xensrcts/results/bisect.xen-unstable.test-amd64-amd64-xl-credit2.guest-localmigrate.html
Revision IDs in each graph node refer, respectively, to the Trees above.

----------------------------------------
Searching for failure / basis pass:
 36772 fail [host=lake-frog] / 36622 [host=rice-weevil] 36540 
[host=grain-weevil] 36514 [host=scape-moth] 35957 [host=leaf-beetle] 35887 
[host=scape-moth] 35810 [host=lace-bug] 35556 ok.
Failure / basis pass flights: 36772 / 35556
(tree with no url: ovmf)
(tree with no url: seabios)
Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/staging/qemu-xen-unstable.git
Tree: qemuu git://xenbits.xen.org/staging/qemu-upstream-unstable.git
Tree: xen git://xenbits.xen.org/xen.git
Latest 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
84066dd4ef4bb5983e246c629a26ef4f3394e5d5
Basis pass a74f1d1204a5c892466b52ac68ee6443c1e459d7 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
0d37748342e29854db7c9f6c47d7f58c6cfba6b2 
befe0a0da90d7ac063fd8b5891c7d0caeeeefa5f
Generating revisions with ./adhoc-revtuple-generator  
git://xenbits.xen.org/linux-pvops.git#a74f1d1204a5c892466b52ac68ee6443c1e459d7-8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9
 
git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860
 
git://xenbits.xen.org/staging/qemu-xen-unstable.git#a4b276b4ce49c8d70dd841ff885b900ec652b994-a4b276b4ce49c8d70dd841ff885b900ec652b994
 
git://xenbits.xen.org/staging/qemu-upstream-unstable.git#0d37748342e29854db7c9f6c47d7f58c6cfba6b2-42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de
 
git://xenbits.xen.org/xen.git#befe0a0da90d7ac063fd8b5891c7d0caeeeefa5f-84066dd4ef4bb5983e246c629a26ef4f3394e5d5
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/linux-pvops
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/linux-pvops.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/qemu-upstream-unstable
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/staging/qemu-upstream-unstable.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/xen
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/xen.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/linux-pvops
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/linux-pvops.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/qemu-upstream-unstable
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/staging/qemu-upstream-unstable.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
+ exec
+ sh -xe
+ cd /export/home/osstest/repos/xen
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/xen.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*
Loaded 14502 nodes in revision graph
Searching for test results:
 35556 pass a74f1d1204a5c892466b52ac68ee6443c1e459d7 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
0d37748342e29854db7c9f6c47d7f58c6cfba6b2 
befe0a0da90d7ac063fd8b5891c7d0caeeeefa5f
 35709 []
 35758 []
 35810 [host=lace-bug]
 35887 [host=scape-moth]
 35957 [host=leaf-beetle]
 36514 [host=scape-moth]
 36540 [host=grain-weevil]
 36622 [host=rice-weevil]
 36772 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
84066dd4ef4bb5983e246c629a26ef4f3394e5d5
 36784 pass irrelevant
 36785 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
84066dd4ef4bb5983e246c629a26ef4f3394e5d5
 36793 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
916735e1814d4d6df0d90b871b0666cdfaf134cd
 36728 fail irrelevant
 36773 pass a74f1d1204a5c892466b52ac68ee6443c1e459d7 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
0d37748342e29854db7c9f6c47d7f58c6cfba6b2 
befe0a0da90d7ac063fd8b5891c7d0caeeeefa5f
 36781 fail irrelevant
 36782 pass irrelevant
 36783 pass irrelevant
 36802 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
e32e9c76bcfc235cb29575c542709f327ba72cb4
 36799 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
51f2224552cc1e6cb22b8b169999cd9711bc8cbc
 36813 blocked e8f616ae4f32159f77e60f73a4267b5806c418bd 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
72c7e0ffd15f48f346e1b740d074679d5207e5d1
 36804 pass e8f616ae4f32159f77e60f73a4267b5806c418bd 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
2bd6add4f5fa4ea2ba9297d6139e9dea42ea70a9
 36808 pass e8f616ae4f32159f77e60f73a4267b5806c418bd 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
cde92647ea4f5c487059a3c89f2e3f1aec9a42d3
 36811 blocked e8f616ae4f32159f77e60f73a4267b5806c418bd 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
879b181f38b0e4e3c7314de980289f4ecd1c5982
 36814 pass e8f616ae4f32159f77e60f73a4267b5806c418bd 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
7f0638e914a542f20e8bb369dd476dfc6c020f0a
 36818 pass e7f3db14eacaf1993a70b1517582603dfdf34988 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
fe3cafd89ab7a9e171a4e8542b00f5f08c7b4f2f
 36822 pass f3995eb51ca8cab80105fb01f128f10839298145 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
fe3cafd89ab7a9e171a4e8542b00f5f08c7b4f2f
 36854 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
 36827 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
1c91d6fba20c1517d78076d412d33cb41f501be5
 36830 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
 36832 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
4fa6b0bacf9cbd37b67b4895906f9e3b1336a8fc
 36835 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
4366f3e99f64fbbe44e3cdac9ae7dbdd72296bc9
 36839 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
78d22f2dfcff39336ba0861f4bb5f8d0f380b7d4
 36842 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
88a2372c6ba44dd42b915a95a823cf9d4d260e25
 36845 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
 36847 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
88a2372c6ba44dd42b915a95a823cf9d4d260e25
 36849 fail 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
 36852 pass 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
88a2372c6ba44dd42b915a95a823cf9d4d260e25
Searching for interesting versions
 Result found: flight 35556 (pass), for basis pass
 Result found: flight 36772 (fail), for basis failure
 Repro found: flight 36773 (pass), for basis pass
 Repro found: flight 36785 (fail), for basis failure
 0 revisions at 8a5f782c33c04ea5c9b3ca6fb32d6039e2e5c0c9 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
a4b276b4ce49c8d70dd841ff885b900ec652b994 
42ffdf360dd9df66b0a4a7ada059c02a3cf3a8de 
88a2372c6ba44dd42b915a95a823cf9d4d260e25
No revisions left to test, checking graph state.
 Result found: flight 36842 (pass), for last pass
 Result found: flight 36845 (fail), for first failure
 Repro found: flight 36847 (pass), for last pass
 Repro found: flight 36849 (fail), for first failure
 Repro found: flight 36852 (pass), for last pass
 Repro found: flight 36854 (fail), for first failure

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
  Bug not present: 88a2372c6ba44dd42b915a95a823cf9d4d260e25

+ exec
+ sh -xe
+ cd /export/home/osstest/repos/xen
+ git remote set-url origin 
git://drall.uk.xensource.com:9419/git://xenbits.xen.org/xen.git
+ git fetch -p origin +refs/heads/*:refs/remotes/origin/*

  commit d639e6a05a0f8ee0e61c6cc4eebba78934ef3648
  Author: Jan Beulich <jbeulich@xxxxxxxx>
  Date:   Mon Mar 23 16:51:14 2015 +0100
  
      x86: allow 64-bit PV guest kernels to suppress user mode exposure of M2P
      
      Xen L4 entries being uniformly installed into any L4 table and 64-bit
      PV kernels running in ring 3 means that user mode was able to see the
      read-only M2P presented by Xen to the guests. While apparently not
      really representing an exploitable information leak, this still very
      certainly was never meant to be that way.
      
      Building on the fact that these guests already have separate kernel and
      user mode page tables we can allow guest kernels to tell Xen that they
      don't want user mode to see this table. We can't, however, do this by
      default: There is no ABI requirement that kernel and user mode page
      tables be separate. Therefore introduce a new VM-assist flag allowing
      the guest to control respective hypervisor behavior:
      - when not set, L4 tables get created with the respective slot blank,
        and whenever the L4 table gets used as a kernel one the missing
        mapping gets inserted,
      - when set, L4 tables get created with the respective slot initialized
        as before, and whenever the L4 table gets used as a user one the
        mapping gets zapped.
      
      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Reviewed-by: Tim Deegan <tim@xxxxxxx>

Revision graph left in 
/home/xc_osstest/results/bisect.xen-unstable.test-amd64-amd64-xl-credit2.guest-localmigrate.{dot,ps,png,html}.
----------------------------------------
36854: tolerable ALL FAIL

flight 36854 xen-unstable real-bisect [real]
http://www.chiark.greenend.org.uk/~xensrcts/logs/36854/

Failures :-/ but no regressions.

Tests which did not succeed,
including tests which could not be run:
 test-amd64-amd64-xl-credit2  12 guest-localmigrate      fail baseline untested


jobs:
 test-amd64-amd64-xl-credit2                                  fail    


------------------------------------------------------------
sg-report-flight on osstest.cam.xci-test.com
logs: /home/xc_osstest/logs
images: /home/xc_osstest/images

Logs, config files, etc. are available at
    http://www.chiark.greenend.org.uk/~xensrcts/logs

Test harness code can be found at
    http://xenbits.xensource.com/gitweb?p=osstest.git;a=summary


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.