[Xen-devel] [PATCH 0/4] x86/vvmx: XSA-278 followup fixes

[Andrew Cooper <andrew.cooper3@xxxxxxxxxx>]

Here are some of the easier fixes following on from the XSA-278 investigation.
This series removes the duplicated checks left over from the security fix.  I
did have some further plans, but the embargo breaking early means I haven't
had time to get them ready for posting.

A longer term plan is to model nested virt as an X86_EMU_ flag, but that
requires a fair amount of untangling of various toolstack actions during
create and migrate.

Andrew Cooper (4):
  x86/vvmx: Unconditionally initialise vmxon_region_pa during vcpu construction
  x86/vvmx: Drop the now-obsolete vmx_inst_check_privilege()
  x86/vvmx: INVVPID instructions should be handled at by L1
  x86/vvmx: Don't handle unknown nested vmexit reasons at L0

 xen/arch/x86/hvm/vmx/vmx.c  |  2 +
 xen/arch/x86/hvm/vmx/vvmx.c | 90 ++++++++++++---------------------------------
 2 files changed, 25 insertions(+), 67 deletions(-)

-- 
2.1.4


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel