Re: [Xen-devel] [PATCH] Update cr3 in PAE mode when guest walk succeed but shadow walk fails

[Keir Fraser <keir.fraser@xxxxxxxxxxxxx>]

On 17/10/2009 14:51, "John Levon" <levon@xxxxxxxxxxxxxxxxx> wrote:

> On Fri, Oct 16, 2009 at 02:09:20PM +0100, George Dunlap wrote:
> 
>> domain is dying, and makes an ASSERT() to that effect.  So currently,
>> in debug mode, this will cause the host to crash; in non-debug mode,
>> this will cause a page-fault loop.
> 
> Isn't this a security hole then?

Debug builds shouldn't be used in production environments. The page-fault
loop, in the non-debug case, is preemptible, so the offending guest can only
waste its own scheduling quantum.

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel