[xen stable-4.18] x86/dom0: correctly set the maximum ->iomem_caps bound for PVH

[patchbot@xxxxxxx]

commit 5f640b62133137e114ce4dcfd72bb3a8fdcafdc0
Author:     Roger Pau Monné <roger.pau@xxxxxxxxxx>
AuthorDate: Thu Mar 20 13:30:30 2025 +0100
Commit:     Jan Beulich <jbeulich@xxxxxxxx>
CommitDate: Thu Mar 20 13:30:30 2025 +0100

    x86/dom0: correctly set the maximum ->iomem_caps bound for PVH
    
    The logic in dom0_setup_permissions() sets the maximum bound in
    ->iomem_caps unconditionally using paddr_bits, which is not correct for HVM
    based domains.  Instead use domain_max_paddr_bits() to get the correct
    maximum paddr bits for each possible domain type.
    
    Switch to using PFN_DOWN() instead of PAGE_SHIFT, as that's shorter.
    
    Fixes: 53de839fb409 ('x86: constrain MFN range Dom0 may access')
    Signed-off-by: Roger Pau Monné <roger.pau@xxxxxxxxxx>
    Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>
    master commit: a00e08799cc7657d2a1aca158f4ad43d4c9103e7
    master date: 2025-03-05 10:26:46 +0100
---
 xen/arch/x86/dom0_build.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/xen/arch/x86/dom0_build.c b/xen/arch/x86/dom0_build.c
index 09fb8b063a..7a3e07c37b 100644
--- a/xen/arch/x86/dom0_build.c
+++ b/xen/arch/x86/dom0_build.c
@@ -475,7 +475,8 @@ int __init dom0_setup_permissions(struct domain *d)
 
     /* The hardware domain is initially permitted full I/O capabilities. */
     rc = ioports_permit_access(d, 0, 0xFFFF);
-    rc |= iomem_permit_access(d, 0UL, (1UL << (paddr_bits - PAGE_SHIFT)) - 1);
+    rc |= iomem_permit_access(d, 0UL,
+                              PFN_DOWN(1UL << paging_max_paddr_bits(d)) - 1);
     rc |= irqs_permit_access(d, 1, nr_irqs_gsi - 1);
 
     /* Modify I/O port access permissions. */
--
generated by git-patchbot for /home/xen/git/xen.git#stable-4.18