[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[XEN][PATCH 0/5] x86: pvh: allow to disable 32-bit (COMPAT) interface support
- To: "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- From: Grygorii Strashko <grygorii_strashko@xxxxxxxx>
- Date: Tue, 11 Nov 2025 17:54:16 +0000
- Accept-language: en-US
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=epam.com; dmarc=pass action=none header.from=epam.com; dkim=pass header.d=epam.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=WStR14FRN9SDUmcVSXUNThnh8CjpvL+KrKqdZ8Ikji0=; b=UPxO0AcGjwUXFxKkGaePJsPNih1QwGwIoWPEfQlisItJELHp6fKKHgu1fwuOy8Fmb6dvriiGmFPrkOeZGtPjWRrqRx+qbpkQS9DKmaLKeCFkCPk24lzAHN3SlKzV30tqVaaqyIHv3/1XeYYQ1YfHBV7UN1x9+lGkRA50Fue6TmchMLQdwtlH9io+FPvu7ZD/2ztx0qVVVgjHNq6bHARPh2YC9VgLRoKCEkh8imzzwbzmg0Gar+7Zp2wyLEBE/UH79DaNaYLqKXgU6S40R8Gsm1rqr9qZafuP6VXKHolVVR/xM9VXIeVvrd02RW9TsiFS65Zt9lOgubqabCDh27pSdw==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=O+7nLabN2fiZ4MYB244mEZoMckMO83NAPHMpWfbW17ztClvcNR67kuudt599TZlbCLuWBlJmHLzLuIyeaDl7LxKugUmjZh5DXfVG826wAnePs40JjVARw+mu5lH5eM7ojbk8J92P5WM/Zt4gCNY4jdTvEakd8Kb0w+5CAhOlF+xktSH+tK1pcYEL4cg/2ymUKR4Ibdxh5fns8IM/lUdDaF344VJ18OQwQLY8VlTFfFZ8FP7NLBzz3z936CHqitcO6r4ETKbSHMlmIdF13sH4zxBD63p+rAxUGBAwGycFOcxt3FNXfrcaMlnpjogim2/vfl8PIQfle1JXek5wJ3bFdA==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=epam.com;
- Cc: Grygorii Strashko <grygorii_strashko@xxxxxxxx>, Jan Beulich <jbeulich@xxxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>, Michal Orzel <michal.orzel@xxxxxxx>, Julien Grall <julien@xxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, Alejandro Vallejo <alejandro.garciavallejo@xxxxxxx>, Jason Andryuk <jason.andryuk@xxxxxxx>
- Delivery-date: Tue, 11 Nov 2025 17:54:22 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
- Thread-index: AQHcUzQyJNTOWnI1O026JOH0FraEjA==
- Thread-topic: [XEN][PATCH 0/5] x86: pvh: allow to disable 32-bit (COMPAT) interface support
From: Grygorii Strashko <grygorii_strashko@xxxxxxxx>
Hi
This series introduces possibility to disable 32-bit (COMPAT) interface support
in the following cases:
- Only PVH domains are used
- Guests (OS) are started by using direct Direct Kernel Boot
- Guests (OS) are 64-bit and Guest early boot code, which is running not
in 64-bit mode, does not access Xen interfaces
(hypercalls, shared_info, ..)
If above criterias are met the COMPAT HVM interface become unreachable and can
be disabled.
Coverage reports analyze and adding guard (debug) exceptions in
hvm_hypercall/hvm_do_multicall_call
and hvm_latch_shinfo_size() confirm that COMPAT HVM interface is unused for
safety use-case.
Grygorii Strashko (5):
x86: hvm: dm: factor out compat code under ifdefs
x86: hvm: compat: introduce vcpu_is_hcall_compat() helper
x86: hvm: factor out compat code under ifdefs
x86: pvh: allow to disable 32-bit interface support
x86: constify has_32bit_shinfo() if !CONFIG_COMPAT
xen/arch/x86/hvm/Kconfig | 19 +++++++++++++++-
xen/arch/x86/hvm/dm.c | 2 ++
xen/arch/x86/hvm/hvm.c | 22 +++++++++++++-----
xen/arch/x86/hvm/hypercall.c | 37 +++++++++++++++++++++++--------
xen/arch/x86/hypercall.c | 6 +----
xen/arch/x86/include/asm/domain.h | 3 ++-
xen/common/kernel.c | 2 +-
xen/include/xen/sched.h | 9 ++++++++
8 files changed, 78 insertions(+), 22 deletions(-)
--
2.34.1
|
