[Xen-devel] [PATCH 0/6] Fix multiple issues with xsave state handling on migrate

[Andrew Cooper <andrew.cooper3@xxxxxxxxxx>]

Patch 5 is the primary bugfix of this series, which is broken in Xen 4.7 as
well as master.  There are multiple latent security issues which would be
exposed at the point support for the first compressed xsave state was added,
but are in currently-dead code.

Andrew Cooper (6):
  x86/domctl: Introduce PV_XSAVE_HDR_SIZE and remove its opencoding
  x86/domctl: Fix TOCTOU race with the use of XEN_DOMCTL_getvcpuextstate
  x86/domctl: Simplfy XEN_DOMCTL_getvcpuextstate when xsave is not in use
  x86/xstate: Fix latent bugs in expand_xsave_states()
  x86/domctl: Fix migration of guests which are not using xsave
  x86/xstate: Fix latent bugs in compress_xsave_states()

 xen/arch/x86/domctl.c        | 62 +++++++++++++++++++++++++++---------------
 xen/arch/x86/hvm/hvm.c       | 20 ++++++++++++--
 xen/arch/x86/xstate.c        | 64 ++++++++++++++++++++++++++++++++------------
 xen/include/asm-x86/xstate.h |  6 +++++
 4 files changed, 112 insertions(+), 40 deletions(-)

-- 
2.1.4


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel