xen-devel

[Top] [All Lists]

[Xen-devel] [PATCH] x86, shadow: confirm the validity of mfn before is_x

from [Kouya Shimura]

[Permanent Link][Original]

To:	xen-devel@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-devel] [PATCH] x86, shadow: confirm the validity of mfn before is_xen_heap_mfn()
From:	Kouya Shimura <kouya@xxxxxxxxxxxxxx>
Date:	Fri, 6 Feb 2009 17:34:22 +0900
Delivery-date:	Fri, 06 Feb 2009 00:35:00 -0800
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id:	Xen developer discussion <xen-devel.lists.xensource.com>
List-post:	<mailto:xen-devel@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-devel-bounces@xxxxxxxxxxxxxxxxxxx

xen hypervisor may crash with direct access to MMIO on hvm.

Signed-off-by: Kouya Shimura <kouya@xxxxxxxxxxxxxx>

diff -r 191643d4307c xen/arch/x86/mm/shadow/multi.c
--- a/xen/arch/x86/mm/shadow/multi.c    Thu Feb 05 15:28:09 2009 +0000
+++ b/xen/arch/x86/mm/shadow/multi.c    Fri Feb 06 16:49:09 2009 +0900
@@ -543,7 +543,7 @@
      * caching attributes in the shadows to match what was asked for.
      */
     if ( (level == 1) && is_hvm_domain(d) && has_arch_pdevs(d) &&
-         !is_xen_heap_mfn(mfn_x(target_mfn)) )
+         !(mfn_valid(target_mfn) && is_xen_heap_mfn(mfn_x(target_mfn))) )
     {
         unsigned int type;
         if ( hvm_get_mem_pinned_cacheattr(d, gfn_x(target_gfn), &type) )

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-devel] [PATCH] x86, shadow: confirm the validity of mfn before is_xen_heap_mfn(), Kouya Shimura <=

Previous by Date:	[Xen-devel] Xen pv_ops domU :: BUG() in remove_from_page_cache(), Mark McLoughlin
Next by Date:	Re: [Xen-devel] [PATCH 1/9] tmem: Public interface for tmem, Jan Beulich
Previous by Thread:	[Xen-devel] Xen pv_ops domU :: BUG() in remove_from_page_cache(), Mark McLoughlin
Next by Thread:	[Xen-devel] [PATCH] compilation fix of xentrace., Isaku Yamahata
Indexes:	[Date] [Thread] [Top] [All Lists]