Re: [Xen-devel] [PATCH] Update cr3 in PAE mode when guest walk succeed but shadow walk fails

[John Levon <levon@xxxxxxxxxxxxxxxxx>]

On Sat, Oct 17, 2009 at 03:15:35PM +0100, Keir Fraser wrote:

> > On Fri, Oct 16, 2009 at 02:09:20PM +0100, George Dunlap wrote:
> > 
> >> domain is dying, and makes an ASSERT() to that effect.  So currently,
> >> in debug mode, this will cause the host to crash; in non-debug mode,
> >> this will cause a page-fault loop.
> > 
> > Isn't this a security hole then?
> 
> Debug builds shouldn't be used in production environments. The page-fault
> loop, in the non-debug case, is preemptible, so the offending guest can only
> waste its own scheduling quantum.

OK, makes sense.

regards
john

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel