linux-kernel - Re: [kvm-devel] [PATCH] Refactor hypercall infrastructure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Sat, 15 Sep 2007 10:53:16 +0300
From:	Avi Kivity <avi@...ranet.com>
To:	Anthony Liguori <anthony@...emonkey.ws>
CC:	Jeremy Fitzhardinge <jeremy@...p.org>,
	kvm-devel@...ts.sourceforge.net, linux-kernel@...r.kernel.org
Subject: Re: [kvm-devel] [PATCH] Refactor hypercall infrastructure

Anthony Liguori wrote:
> Jeremy Fitzhardinge wrote:
>   
>> Anthony Liguori wrote:
>>   
>>     
>>> This patch refactors the current hypercall infrastructure to better support live
>>> migration and SMP.  It eliminates the hypercall page by trapping the UD
>>> exception that would occur if you used the wrong hypercall instruction for the
>>> underlying architecture and replacing it with the right one lazily.
>>>   
>>>     
>>>       
>> I guess it would be pretty rude/unlikely for these opcodes to get reused
>> in other implementations...  But couldn't you make the page trap
>> instead, rather than relying on an instruction fault?
>>   
>>     
>
> The whole point of using the instruction is to allow hypercalls to be 
> used in many locations.  This has the nice side effect of not requiring 
> a central hypercall initialization routine in the guest to fetch the 
> hypercall page.  A PV driver can be completely independent of any other 
> code provided that it restricts itself to it's hypercall namespace.
>
>   

It also has the benefit of not requiring an initialization protocol, and
of reducing complaints about the hypervisor injecting code into the guest.


>>> It also introduces the infrastructure to probe for hypercall available via
>>> CPUID leaves 0x40000002.  CPUID leaf 0x40000003 should be filled out by
>>> userspace.
>>>   
>>>     
>>>       
>> Is this compatible with Xen's (and other's) use of cpuid?  That is,
>> 0x40000000 returns a hypervisor-specific signature in e[bcd]x, and eax
>> has the max hypervisor leaf.
>>   
>>     
>
> Xen is currently using 0/1/2.  I had thought it was only using 0/1.  The 
> intention was not to squash Xen's current CPUID usage so that it would 
> still be possible for Xen to make use of the guest code.  Can we agree 
> that Xen won't squash leaves 3/4 or is it not worth trying to be 
> compatible at this point?
>   

I definitely want kvm to be able to emulate the Xen hypercall interface,
but there's no need to allow both concurrently.  So I'd say use
0x40000000 for detection and the rest cannot clash because detection fails.

-- 
Do not meddle in the internals of kernels, for they are subtle and quick to panic.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/