|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-devel] [xen-4.11-testing bisection] complete test-amd64-amd64-qemuu-nested-intel
branch xen-4.11-testing xenbranch xen-4.11-testing job test-amd64-amd64-qemuu-nested-intel testid debian-hvm-install/l1/l2 Tree: linux git://xenbits.xen.org/linux-pvops.git Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git Tree: qemuu git://xenbits.xen.org/qemu-xen.git Tree: seabios git://xenbits.xen.org/osstest/seabios.git Tree: xen git://xenbits.xen.org/xen.git *** Found and reproduced problem changeset *** Bug is in tree: xen git://xenbits.xen.org/xen.git Bug introduced: eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 Bug not present: 0db606d73fba8c83bf2cafe16bc132f90ec766ca Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144146/ commit eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Date: Thu Dec 20 17:25:29 2018 +0000 x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207 CVE-2018-12207 covers a set of errata on various Intel processors, whereby a machine check exception can be generated in a corner case when an executable mapping changes size or cacheability without TLB invalidation. HVM guest kernels can trigger this to DoS the host. To mitigate, in affected hardware, all EPT superpages are marked NX. When an instruction fetch violation is observed against the superpage, the superpage is shattered to 4k and has execute permissions restored. This prevents the guest kernel from being able to create the necessary preconditions in the iTLB to exploit the vulnerability. This does come with a workload-dependent performance overhead, caused by increased TLB pressure. Performance can be restored, if guest kernels are trusted not to mount an attack, by specifying ept=exec-sp on the command line. This is part of XSA-304 / CVE-2018-12207 Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx> For bisection revision-tuple graph see: http://logs.test-lab.xenproject.org/osstest/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.html Revision IDs in each graph node refer, respectively, to the Trees above. ---------------------------------------- Running cs-bisection-step --graph-out=/home/logs/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2 --summary-out=tmp/144146.bisection-summary --basis-template=144025 --blessings=real,real-bisect xen-4.11-testing test-amd64-amd64-qemuu-nested-intel debian-hvm-install/l1/l2 Searching for failure / basis pass: 144099 fail [host=godello0] / 144025 [host=baroque0] 144002 [host=huxelrebe1] 143989 [host=huxelrebe0] 143973 [host=albana1] 143939 [host=fiano1] 143905 [host=debina0] 143778 [host=godello1] 143586 [host=elbling1] 143479 [host=albana0] 143378 ok. Failure / basis pass flights: 144099 / 143378 (tree with no url: minios) Tree: linux git://xenbits.xen.org/linux-pvops.git Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git Tree: qemuu git://xenbits.xen.org/qemu-xen.git Tree: seabios git://xenbits.xen.org/osstest/seabios.git Tree: xen git://xenbits.xen.org/xen.git Latest b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 bfcf262488a140550a53361c225a9b2b1bee0db8 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 74507046dbd2c5d2991eeabd1af39af0d6b29d70 Basis pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4976a776b283021c252be794e90947732b6f8a92 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 120996f147131eca8af90e30c900bc14bc824d9f aebe0554e9ac4e5addb0d3cf25bd51af7dd61821 Generating revisions with ./adhoc-revtuple-generator git://xenbits.xen.org/linux-pvops.git#b98aebd298246df37b472c52a2ee1023256d02e3-b98aebd298246df37b472c52a2ee1023256d02e3 git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860 git://xenbits.xen.org/osstest/ovmf.git#4976a776b283021c252be794e90947732b6f8a92-bfcf262488a140550a53361c225a9b2b1bee0db8 git://xenbits.xen.org/qemu-xen-traditional.git#c8ea0457495342c417c3dc033bb\ a25148b279f60-c8ea0457495342c417c3dc033bba25148b279f60 git://xenbits.xen.org/qemu-xen.git#06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad-06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad git://xenbits.xen.org/osstest/seabios.git#120996f147131eca8af90e30c900bc14bc824d9f-9caa19be0e534c687081fbdfcd301406e728c98c git://xenbits.xen.org/xen.git#aebe0554e9ac4e5addb0d3cf25bd51af7dd61821-74507046dbd2c5d2991eeabd1af39af0d6b29d70 Use of uninitialized value $parents in array dereference at ./adhoc-revtuple-generator line 465. Use of uninitialized value in concatenation (.) or string at ./adhoc-revtuple-generator line 465. Loaded 12520 nodes in revision graph Searching for test results: 143378 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4976a776b283021c252be794e90947732b6f8a92 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 120996f147131eca8af90e30c900bc14bc824d9f aebe0554e9ac4e5addb0d3cf25bd51af7dd61821 143479 [host=albana0] 143586 [host=elbling1] 143778 [host=godello1] 143905 [host=debina0] 143939 [host=fiano1] 143989 [host=huxelrebe0] 143973 [host=albana1] 144002 [host=huxelrebe1] 144025 [host=baroque0] 144074 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4976a776b283021c252be794e90947732b6f8a92 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 120996f147131eca8af90e30c900bc14bc824d9f aebe0554e9ac4e5addb0d3cf25bd51af7dd61821 144073 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 74507046dbd2c5d2991eeabd1af39af0d6b29d70 144058 fail irrelevant 144101 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 74507046dbd2c5d2991eeabd1af39af0d6b29d70 144136 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 0db606d73fba8c83bf2cafe16bc132f90ec766ca 144108 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 420c859831d621e556317cf100161766eb08fb86 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 006b2041242129896fbd30135b3dc6f575894a07 144099 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 bfcf262488a140550a53361c225a9b2b1bee0db8 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 74507046dbd2c5d2991eeabd1af39af0d6b29d70 144092 fail irrelevant 144094 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e34022dcbe64996d0fc8be0b1b8e09ae7134216c c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad c1ab7d7ed5306641784a9ed8972db5151a49a1a1 006b2041242129896fbd30135b3dc6f575894a07 144126 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 144112 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4baa783d5e372380c64d538a153bc97640e8257c c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 006b2041242129896fbd30135b3dc6f575894a07 144096 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 aa4db5b15ef95061c18cbad58ae04479d030967b c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 006b2041242129896fbd30135b3dc6f575894a07 144131 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 4976a776b283021c252be794e90947732b6f8a92 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 120996f147131eca8af90e30c900bc14bc824d9f aebe0554e9ac4e5addb0d3cf25bd51af7dd61821 144140 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 144116 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 0db606d73fba8c83bf2cafe16bc132f90ec766ca 144122 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c cc06f60b96d91c995d17b4798176061dc3d6925d 144133 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 bfcf262488a140550a53361c225a9b2b1bee0db8 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 74507046dbd2c5d2991eeabd1af39af0d6b29d70 144143 pass b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 0db606d73fba8c83bf2cafe16bc132f90ec766ca 144146 fail b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 Searching for interesting versions Result found: flight 143378 (pass), for basis pass Result found: flight 144099 (fail), for basis failure Repro found: flight 144131 (pass), for basis pass Repro found: flight 144133 (fail), for basis failure 0 revisions at b98aebd298246df37b472c52a2ee1023256d02e3 c530a75c1e6a472b0eb9558310b518f0dfcd8860 e92b155740cdbf10a85ed8f37f69da0991fc8275 c8ea0457495342c417c3dc033bba25148b279f60 06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 9caa19be0e534c687081fbdfcd301406e728c98c 0db606d73fba8c83bf2cafe16bc132f90ec766ca No revisions left to test, checking graph state. Result found: flight 144116 (pass), for last pass Result found: flight 144126 (fail), for first failure Repro found: flight 144136 (pass), for last pass Repro found: flight 144140 (fail), for first failure Repro found: flight 144143 (pass), for last pass Repro found: flight 144146 (fail), for first failure *** Found and reproduced problem changeset *** Bug is in tree: xen git://xenbits.xen.org/xen.git Bug introduced: eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 Bug not present: 0db606d73fba8c83bf2cafe16bc132f90ec766ca Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144146/ commit eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787 Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Date: Thu Dec 20 17:25:29 2018 +0000 x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207 CVE-2018-12207 covers a set of errata on various Intel processors, whereby a machine check exception can be generated in a corner case when an executable mapping changes size or cacheability without TLB invalidation. HVM guest kernels can trigger this to DoS the host. To mitigate, in affected hardware, all EPT superpages are marked NX. When an instruction fetch violation is observed against the superpage, the superpage is shattered to 4k and has execute permissions restored. This prevents the guest kernel from being able to create the necessary preconditions in the iTLB to exploit the vulnerability. This does come with a workload-dependent performance overhead, caused by increased TLB pressure. Performance can be restored, if guest kernels are trusted not to mount an attack, by specifying ept=exec-sp on the command line. This is part of XSA-304 / CVE-2018-12207 Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx> Revision graph left in /home/logs/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.{dot,ps,png,html,svg}. ---------------------------------------- 144146: tolerable ALL FAIL flight 144146 xen-4.11-testing real-bisect [real] http://logs.test-lab.xenproject.org/osstest/logs/144146/ Failures :-/ but no regressions. Tests which did not succeed, including tests which could not be run: test-amd64-amd64-qemuu-nested-intel 17 debian-hvm-install/l1/l2 fail baseline untested jobs: test-amd64-amd64-qemuu-nested-intel fail ------------------------------------------------------------ sg-report-flight on osstest.test-lab.xenproject.org logs: /home/logs/logs images: /home/logs/images Logs, config files, etc. are available at http://logs.test-lab.xenproject.org/osstest/logs Explanation of these reports, and of osstest in general, is at http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master Test harness code can be found at http://xenbits.xen.org/gitweb?p=osstest.git;a=summary _______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxxxxxxxxx https://lists.xenproject.org/mailman/listinfo/xen-devel
|
 |
Lists.xenproject.org is hosted with RackSpace, monitoring our |