Re: [Xen-devel] domU crashing Xen

[Chris Wright <chrisw@xxxxxxxxxxxx>]

* Keir Fraser (Keir.Fraser@xxxxxxxxxxxx) wrote:
> On 12/10/06 07:26, "Chris Wright" <chrisw@xxxxxxxxxxxx> wrote:
> 
> > Haven't worked out exactly what's causing the bug, but in testing the
> > pv_ops tree against current Xen (11736:f7d65fb7299b) I can reliably
> > crash Xen with the following trace, caused by:
> > 
> > arch/x86/traps.c::handle_gdt_ldt_mapping_fault()
> >     ...
> >     /* Should never fault in another vcpu's area. */
> >     BUG_ON(vcpu_area != current->vcpu_id);
> 
> The shadow-refcount code is quite fresh. We should confirm this isn't
> exploitable by ordinary PV guests though.

Indeed, I'll dig at this a little more.

thanks,
-chris

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel