[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH for-4.17 0/4] XSA-409 fixes


  • To: Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  • Date: Wed, 26 Oct 2022 11:20:14 +0100
  • Authentication-results: esa4.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none
  • Cc: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Xen Security Team <security@xxxxxxx>, Jan Beulich <JBeulich@xxxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, Julien Grall <julien@xxxxxxx>, Volodymyr Babchuk <Volodymyr_Babchuk@xxxxxxxx>, "Bertrand Marquis" <bertrand.marquis@xxxxxxx>, Henry Wang <Henry.Wang@xxxxxxx>, "Anthony PERARD" <anthony.perard@xxxxxxxxxx>
  • Delivery-date: Wed, 26 Oct 2022 10:20:40 +0000
  • Ironport-data: A9a23:34wGr6IrxYsG23KCFE+RQZUlxSXFcZb7ZxGr2PjKsXjdYENSgTxVy WsWD2GCM/bYMTf9ed4naoizpB8Dv8DQxoNqHQtlqX01Q3x08seUXt7xwmUcnc+xBpaaEB84t ZV2hv3odp1coqr0/0/1WlTZhSAgk/vOHtIQMcacUghpXwhoVSw9vhxqnu89k+ZAjMOwRgiAo rsemeWGULOe82MyYz98B56r8ks15q2q4m1A5zTSWNgQ1LPgvyhNZH4gDfnZw0vQGuF8AuO8T uDf+7C1lkuxE8AFU47Nfh7TKyXmc5aKVeS8oiM+t5uK23CukhcawKcjXMfwXG8M49m/c3Kd/ /0W3XC4YV9B0qQhA43xWTEAe811FfUuFLMqvRFTGCFcpqHLWyKE/hlgMK05FY8J3cMuX0BCz v1bdhIBcBTfrO6YmJvuH4GAhux7RCXqFIYWu3UmxjDFF/c2B5vERs0m5/cBgm123JoXW6+DO YxJMlKDbzyZC/FLEn4RBIgzg6GDgX7nficDgFmUubA28y7YywkZPL3FYISNJIXSG5s9ckCwo FD5rnXpWxcgDPuh7Ge36CKBoNDRtHauMG4VPOLhraM76LGJ/UQtDxkRWUq+sOOOoEe0UNJCK GQZ4iMr66M18SSDTMT5XhC+iG6JuFgbQdU4O8037hucjJXd5QmxD3IBCDVGbbQOvsIsWSYj0 FPPmtrzHCFuq5WcU3fb/bCRxRupIjQcJ2IGYS4CTCMG7sPlrYV1iQjAJv54HaWolNzpCBngz jbMqzIx750DgMhO26il8FTvhzO3uoOPXgMz/h/QXG+u8kV+foHNT5OswUjW67BHNonxZnurs WUAmsOexPsTFpzLnyuIKNjhB5nwuazDameFxwcyQd9xrFxB5kJPY6hS8RZbfRlIPv0FOmHLb FHX5Shdysd6aS7CgbBMX6q9DMEjzK7FHNvjV+zJYtcmXqWdZDNr7wk1OxfOgjmFfFwE1PhmZ MzFKZrE4WMyU/wP8dagewsKPVbHLAgazHibe530xg/PPVG2NC/MEudt3Ldjg4kEAEK4TOf9q Yg32yiikU83vAjCjs7/qNd7ELzyBSJnba0aUuQOHgJ5HiJoGXs6F9jayq47dopuksx9z7mWo C7nAB4BkQCn2BUrzDlmjVg6NtvSsWtX9ypnbUTAw370s5TcXWpfxPhGLMZmFVXW3Odi0eR1X 5E4lzaoW5xypsD8021FN/HV9dU6HDzy3FLmAsZQSGVmF3KWb1eSoYGMk8qG3HRmMxdbQuNk+ OTxi12GHMtrqsYLJJ++Vc9DBmiZ5RA18N+elWOSSjWPUC0AKLRXFhE=
  • Ironport-hdrordr: A9a23:Y/uJ/KFvER3E5H1OpLqE4seALOsnbusQ8zAXP0AYc3Nom6uj5q STdZUgpHrJYVkqOU3I9ersBEDiewK/yXcW2+ks1N6ZNWGM0ldARLsSircKqAePJ8SRzIJgPN 9bAstDNOE=
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

For 4.17, and backport to all stable releases.

Patch 2 doesn't technically need backporting, but it's safe and I'm
dis-enclined to forgo testing in older releases.

Andrew Cooper (4):
  xen: Introduce non-broken hypercalls for the p2m pool size
  tools/tests: Unit test for p2m pool size
  xen/arm, libxl: Revert XEN_DOMCTL_shadow_op; use p2m mempool hypercalls
  xen/arm: Correct the p2m pool size calculations

 tools/include/xenctrl.h              |   3 +
 tools/libs/ctrl/xc_domain.c          |  29 ++++++
 tools/libs/light/libxl_arm.c         |  14 +--
 tools/libs/light/libxl_dom.c         |  19 ++++
 tools/libs/light/libxl_internal.h    |   3 +
 tools/libs/light/libxl_x86.c         |  15 +--
 tools/tests/Makefile                 |   1 +
 tools/tests/p2m-pool/.gitignore      |   1 +
 tools/tests/p2m-pool/Makefile        |  42 ++++++++
 tools/tests/p2m-pool/test-p2m-pool.c | 181 +++++++++++++++++++++++++++++++++++
 xen/arch/arm/domctl.c                |  53 ----------
 xen/arch/arm/include/asm/p2m.h       |   1 -
 xen/arch/arm/p2m.c                   |  31 ++++--
 xen/arch/x86/include/asm/hap.h       |   1 +
 xen/arch/x86/include/asm/shadow.h    |   4 +
 xen/arch/x86/mm/hap/hap.c            |  10 ++
 xen/arch/x86/mm/paging.c             |  39 ++++++++
 xen/arch/x86/mm/shadow/common.c      |  10 ++
 xen/common/domctl.c                  |  14 +++
 xen/include/public/domctl.h          |  26 ++++-
 xen/include/xen/domain.h             |   3 +
 21 files changed, 411 insertions(+), 89 deletions(-)
 create mode 100644 tools/tests/p2m-pool/.gitignore
 create mode 100644 tools/tests/p2m-pool/Makefile
 create mode 100644 tools/tests/p2m-pool/test-p2m-pool.c

-- 
2.11.0




 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.