On 17/10/2009 14:51, "John Levon" <levon@xxxxxxxxxxxxxxxxx> wrote:
> On Fri, Oct 16, 2009 at 02:09:20PM +0100, George Dunlap wrote:
>
>> domain is dying, and makes an ASSERT() to that effect. So currently,
>> in debug mode, this will cause the host to crash; in non-debug mode,
>> this will cause a page-fault loop.
>
> Isn't this a security hole then?
Debug builds shouldn't be used in production environments. The page-fault
loop, in the non-debug case, is preemptible, so the offending guest can only
waste its own scheduling quantum.
-- Keir
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
|