[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[xen-unstable bisection] complete test-amd64-amd64-dom0pvh-xl-amd



branch xen-unstable
xenbranch xen-unstable
job test-amd64-amd64-dom0pvh-xl-amd
testid xen-boot

Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  753cb68e653002e89fdcd1c80e52905fdbfb78cb
  Bug not present: 0bf755e2c856628e11e93c76c3e12974e9964638
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/164620/


  commit 753cb68e653002e89fdcd1c80e52905fdbfb78cb
  Author: Jan Beulich <jbeulich@xxxxxxxx>
  Date:   Wed Aug 25 14:17:32 2021 +0200
  
      x86/p2m: guard (in particular) identity mapping entries
      
      Such entries, created by set_identity_p2m_entry(), should only be
      destroyed by clear_identity_p2m_entry(). However, similarly, entries
      created by set_mmio_p2m_entry() should only be torn down by
      clear_mmio_p2m_entry(), so the logic gets based upon p2m_mmio_direct as
      the entry type (separation between "ordinary" and 1:1 mappings would
      require a further indicator to tell apart the two).
      
      As to the guest_remove_page() change, commit 48dfb297a20a ("x86/PVH:
      allow guest_remove_page to remove p2m_mmio_direct pages"), which
      introduced the call to clear_mmio_p2m_entry(), claimed this was done for
      hwdom only without this actually having been the case. However, this
      code shouldn't be there in the first place, as MMIO entries shouldn't be
      dropped this way. Avoid triggering the warning again that 48dfb297a20a
      silenced by an adjustment to xenmem_add_to_physmap_one() instead.
      
      Note that guest_physmap_mark_populate_on_demand() gets tightened beyond
      the immediate purpose of this change.
      
      Note also that I didn't inspect code which isn't security supported,
      e.g. sharing, paging, or altp2m.
      
      This is CVE-2021-28694 / part of XSA-378.
      
      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Reviewed-by: Paul Durrant <paul@xxxxxxx>


For bisection revision-tuple graph see:
   
http://logs.test-lab.xenproject.org/osstest/results/bisect/xen-unstable/test-amd64-amd64-dom0pvh-xl-amd.xen-boot.html
Revision IDs in each graph node refer, respectively, to the Trees above.

----------------------------------------
Running cs-bisection-step 
--graph-out=/home/logs/results/bisect/xen-unstable/test-amd64-amd64-dom0pvh-xl-amd.xen-boot
 --summary-out=tmp/164620.bisection-summary --basis-template=164477 
--blessings=real,real-bisect,real-retry xen-unstable 
test-amd64-amd64-dom0pvh-xl-amd xen-boot
Searching for failure / basis pass:
 164528 fail [host=pinot1] / 164477 ok.
Failure / basis pass flights: 164528 / 164477
(tree with no url: minios)
(tree with no url: ovmf)
(tree with no url: seabios)
Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: xen git://xenbits.xen.org/xen.git
Latest c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
8064488062641ae505b2a7369611c38057a7788b
Basis pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
a931e8e64af07bd333a31f3b71a3f8f3e7910857
Generating revisions with ./adhoc-revtuple-generator  
git://xenbits.xen.org/linux-pvops.git#c3038e718a19fc596f7b1baba0f83d5146dc7784-c3038e718a19fc596f7b1baba0f83d5146dc7784
 
git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860
 
git://xenbits.xen.org/qemu-xen-traditional.git#3d273dd05e51e5a1ffba3d98c7437ee84e8f8764-3d273dd05e51e5a1ffba3d98c7437ee84e8f8764
 git://xenbits.xen.org/qemu-xen.git#136c34c9bc4179dc64b15b2bb5f0c54\
 ca4ddf823-136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
git://xenbits.xen.org/xen.git#a931e8e64af07bd333a31f3b71a3f8f3e7910857-8064488062641ae505b2a7369611c38057a7788b
Loaded 5001 nodes in revision graph
Searching for test results:
 164477 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
a931e8e64af07bd333a31f3b71a3f8f3e7910857
 164499 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
c08d68cd2aacbc7cb56e73ada241bfe4639bbc68
 164529 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
a931e8e64af07bd333a31f3b71a3f8f3e7910857
 164528 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
8064488062641ae505b2a7369611c38057a7788b
 164588 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
c08d68cd2aacbc7cb56e73ada241bfe4639bbc68
 164596 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
8ea80530cd0dbb8ffa7ac92606a3ee29663fdc93
 164598 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
f147422bf9476fb8161b43e35f5901571ed17c35
 164602 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
0bf755e2c856628e11e93c76c3e12974e9964638
 164607 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
753cb68e653002e89fdcd1c80e52905fdbfb78cb
 164611 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
8064488062641ae505b2a7369611c38057a7788b
 164613 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
0bf755e2c856628e11e93c76c3e12974e9964638
 164617 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
753cb68e653002e89fdcd1c80e52905fdbfb78cb
 164618 pass c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
0bf755e2c856628e11e93c76c3e12974e9964638
 164620 fail c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
753cb68e653002e89fdcd1c80e52905fdbfb78cb
Searching for interesting versions
 Result found: flight 164477 (pass), for basis pass
 For basis failure, parent search stopping at 
c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
0bf755e2c856628e11e93c76c3e12974e9964638, results HASH(0x55665085d020) 
HASH(0x55665085ea28) HASH(0x556650863960) For basis failure, parent search 
stopping at c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 136c34c9b\
 c4179dc64b15b2bb5f0c54ca4ddf823 8ea80530cd0dbb8ffa7ac92606a3ee29663fdc93, 
results HASH(0x55665084f1a0) For basis failure, parent search stopping at 
c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
a931e8e64af07bd333a31f3b71a3f8f3e7910857, results HASH(0x55665084d318) 
HASH(0x5566508523d0) Result found: flight 164499 (fail), for basis failure (at 
ancestor ~708)
 Repro found: flight 164529 (pass), for basis pass
 Repro found: flight 164611 (fail), for basis failure
 0 revisions at c3038e718a19fc596f7b1baba0f83d5146dc7784 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
3d273dd05e51e5a1ffba3d98c7437ee84e8f8764 
136c34c9bc4179dc64b15b2bb5f0c54ca4ddf823 
0bf755e2c856628e11e93c76c3e12974e9964638
No revisions left to test, checking graph state.
 Result found: flight 164602 (pass), for last pass
 Result found: flight 164607 (fail), for first failure
 Repro found: flight 164613 (pass), for last pass
 Repro found: flight 164617 (fail), for first failure
 Repro found: flight 164618 (pass), for last pass
 Repro found: flight 164620 (fail), for first failure

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  753cb68e653002e89fdcd1c80e52905fdbfb78cb
  Bug not present: 0bf755e2c856628e11e93c76c3e12974e9964638
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/164620/


  commit 753cb68e653002e89fdcd1c80e52905fdbfb78cb
  Author: Jan Beulich <jbeulich@xxxxxxxx>
  Date:   Wed Aug 25 14:17:32 2021 +0200
  
      x86/p2m: guard (in particular) identity mapping entries
      
      Such entries, created by set_identity_p2m_entry(), should only be
      destroyed by clear_identity_p2m_entry(). However, similarly, entries
      created by set_mmio_p2m_entry() should only be torn down by
      clear_mmio_p2m_entry(), so the logic gets based upon p2m_mmio_direct as
      the entry type (separation between "ordinary" and 1:1 mappings would
      require a further indicator to tell apart the two).
      
      As to the guest_remove_page() change, commit 48dfb297a20a ("x86/PVH:
      allow guest_remove_page to remove p2m_mmio_direct pages"), which
      introduced the call to clear_mmio_p2m_entry(), claimed this was done for
      hwdom only without this actually having been the case. However, this
      code shouldn't be there in the first place, as MMIO entries shouldn't be
      dropped this way. Avoid triggering the warning again that 48dfb297a20a
      silenced by an adjustment to xenmem_add_to_physmap_one() instead.
      
      Note that guest_physmap_mark_populate_on_demand() gets tightened beyond
      the immediate purpose of this change.
      
      Note also that I didn't inspect code which isn't security supported,
      e.g. sharing, paging, or altp2m.
      
      This is CVE-2021-28694 / part of XSA-378.
      
      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Reviewed-by: Paul Durrant <paul@xxxxxxx>

Revision graph left in 
/home/logs/results/bisect/xen-unstable/test-amd64-amd64-dom0pvh-xl-amd.xen-boot.{dot,ps,png,html,svg}.
----------------------------------------
164620: tolerable ALL FAIL

flight 164620 xen-unstable real-bisect [real]
http://logs.test-lab.xenproject.org/osstest/logs/164620/

Failures :-/ but no regressions.

Tests which did not succeed,
including tests which could not be run:
 test-amd64-amd64-dom0pvh-xl-amd  8 xen-boot             fail baseline untested


jobs:
 test-amd64-amd64-dom0pvh-xl-amd                              fail    


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary




 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.