[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [xen-4.11-testing bisection] complete test-amd64-amd64-qemuu-nested-intel



branch xen-4.11-testing
xenbranch xen-4.11-testing
job test-amd64-amd64-qemuu-nested-intel
testid debian-hvm-install/l1/l2

Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: seabios git://xenbits.xen.org/osstest/seabios.git
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
  Bug not present: 0db606d73fba8c83bf2cafe16bc132f90ec766ca
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144146/


  commit eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
  Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  Date:   Thu Dec 20 17:25:29 2018 +0000
  
      x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207
      
      CVE-2018-12207 covers a set of errata on various Intel processors, 
whereby a
      machine check exception can be generated in a corner case when an 
executable
      mapping changes size or cacheability without TLB invalidation.  HVM guest
      kernels can trigger this to DoS the host.
      
      To mitigate, in affected hardware, all EPT superpages are marked NX.  
When an
      instruction fetch violation is observed against the superpage, the 
superpage
      is shattered to 4k and has execute permissions restored.  This prevents 
the
      guest kernel from being able to create the necessary preconditions in the 
iTLB
      to exploit the vulnerability.
      
      This does come with a workload-dependent performance overhead, caused by
      increased TLB pressure.  Performance can be restored, if guest kernels are
      trusted not to mount an attack, by specifying ept=exec-sp on the command 
line.
      
      This is part of XSA-304 / CVE-2018-12207
      
      Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
      Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx>
      Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>


For bisection revision-tuple graph see:
   
http://logs.test-lab.xenproject.org/osstest/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.html
Revision IDs in each graph node refer, respectively, to the Trees above.

----------------------------------------
Running cs-bisection-step 
--graph-out=/home/logs/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2
 --summary-out=tmp/144146.bisection-summary --basis-template=144025 
--blessings=real,real-bisect xen-4.11-testing 
test-amd64-amd64-qemuu-nested-intel debian-hvm-install/l1/l2
Searching for failure / basis pass:
 144099 fail [host=godello0] / 144025 [host=baroque0] 144002 [host=huxelrebe1] 
143989 [host=huxelrebe0] 143973 [host=albana1] 143939 [host=fiano1] 143905 
[host=debina0] 143778 [host=godello1] 143586 [host=elbling1] 143479 
[host=albana0] 143378 ok.
Failure / basis pass flights: 144099 / 143378
(tree with no url: minios)
Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: ovmf git://xenbits.xen.org/osstest/ovmf.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: seabios git://xenbits.xen.org/osstest/seabios.git
Tree: xen git://xenbits.xen.org/xen.git
Latest b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bfcf262488a140550a53361c225a9b2b1bee0db8 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
74507046dbd2c5d2991eeabd1af39af0d6b29d70
Basis pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
4976a776b283021c252be794e90947732b6f8a92 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
120996f147131eca8af90e30c900bc14bc824d9f 
aebe0554e9ac4e5addb0d3cf25bd51af7dd61821
Generating revisions with ./adhoc-revtuple-generator  
git://xenbits.xen.org/linux-pvops.git#b98aebd298246df37b472c52a2ee1023256d02e3-b98aebd298246df37b472c52a2ee1023256d02e3
 
git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860
 
git://xenbits.xen.org/osstest/ovmf.git#4976a776b283021c252be794e90947732b6f8a92-bfcf262488a140550a53361c225a9b2b1bee0db8
 git://xenbits.xen.org/qemu-xen-traditional.git#c8ea0457495342c417c3dc033bb\
 a25148b279f60-c8ea0457495342c417c3dc033bba25148b279f60 
git://xenbits.xen.org/qemu-xen.git#06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad-06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad
 
git://xenbits.xen.org/osstest/seabios.git#120996f147131eca8af90e30c900bc14bc824d9f-9caa19be0e534c687081fbdfcd301406e728c98c
 
git://xenbits.xen.org/xen.git#aebe0554e9ac4e5addb0d3cf25bd51af7dd61821-74507046dbd2c5d2991eeabd1af39af0d6b29d70
Use of uninitialized value $parents in array dereference at 
./adhoc-revtuple-generator line 465.
Use of uninitialized value in concatenation (.) or string at 
./adhoc-revtuple-generator line 465.
Loaded 12520 nodes in revision graph
Searching for test results:
 143378 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
4976a776b283021c252be794e90947732b6f8a92 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
120996f147131eca8af90e30c900bc14bc824d9f 
aebe0554e9ac4e5addb0d3cf25bd51af7dd61821
 143479 [host=albana0]
 143586 [host=elbling1]
 143778 [host=godello1]
 143905 [host=debina0]
 143939 [host=fiano1]
 143989 [host=huxelrebe0]
 143973 [host=albana1]
 144002 [host=huxelrebe1]
 144025 [host=baroque0]
 144074 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
4976a776b283021c252be794e90947732b6f8a92 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
120996f147131eca8af90e30c900bc14bc824d9f 
aebe0554e9ac4e5addb0d3cf25bd51af7dd61821
 144073 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
74507046dbd2c5d2991eeabd1af39af0d6b29d70
 144058 fail irrelevant
 144101 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
74507046dbd2c5d2991eeabd1af39af0d6b29d70
 144136 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
0db606d73fba8c83bf2cafe16bc132f90ec766ca
 144108 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
420c859831d621e556317cf100161766eb08fb86 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
006b2041242129896fbd30135b3dc6f575894a07
 144099 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bfcf262488a140550a53361c225a9b2b1bee0db8 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
74507046dbd2c5d2991eeabd1af39af0d6b29d70
 144092 fail irrelevant
 144094 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e34022dcbe64996d0fc8be0b1b8e09ae7134216c 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
c1ab7d7ed5306641784a9ed8972db5151a49a1a1 
006b2041242129896fbd30135b3dc6f575894a07
 144126 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
 144112 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
4baa783d5e372380c64d538a153bc97640e8257c 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
006b2041242129896fbd30135b3dc6f575894a07
 144096 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
aa4db5b15ef95061c18cbad58ae04479d030967b 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
006b2041242129896fbd30135b3dc6f575894a07
 144131 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
4976a776b283021c252be794e90947732b6f8a92 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
120996f147131eca8af90e30c900bc14bc824d9f 
aebe0554e9ac4e5addb0d3cf25bd51af7dd61821
 144140 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
 144116 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
0db606d73fba8c83bf2cafe16bc132f90ec766ca
 144122 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
cc06f60b96d91c995d17b4798176061dc3d6925d
 144133 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
bfcf262488a140550a53361c225a9b2b1bee0db8 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
74507046dbd2c5d2991eeabd1af39af0d6b29d70
 144143 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
0db606d73fba8c83bf2cafe16bc132f90ec766ca
 144146 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
Searching for interesting versions
 Result found: flight 143378 (pass), for basis pass
 Result found: flight 144099 (fail), for basis failure
 Repro found: flight 144131 (pass), for basis pass
 Repro found: flight 144133 (fail), for basis failure
 0 revisions at b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
e92b155740cdbf10a85ed8f37f69da0991fc8275 
c8ea0457495342c417c3dc033bba25148b279f60 
06fbdaf7d6c43b55339d4ad74c77c9be84ae41ad 
9caa19be0e534c687081fbdfcd301406e728c98c 
0db606d73fba8c83bf2cafe16bc132f90ec766ca
No revisions left to test, checking graph state.
 Result found: flight 144116 (pass), for last pass
 Result found: flight 144126 (fail), for first failure
 Repro found: flight 144136 (pass), for last pass
 Repro found: flight 144140 (fail), for first failure
 Repro found: flight 144143 (pass), for last pass
 Repro found: flight 144146 (fail), for first failure

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
  Bug not present: 0db606d73fba8c83bf2cafe16bc132f90ec766ca
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144146/


  commit eb60ebb1f03b74ee1b8150ae74c0cf81f78f4787
  Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  Date:   Thu Dec 20 17:25:29 2018 +0000
  
      x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207
      
      CVE-2018-12207 covers a set of errata on various Intel processors, 
whereby a
      machine check exception can be generated in a corner case when an 
executable
      mapping changes size or cacheability without TLB invalidation.  HVM guest
      kernels can trigger this to DoS the host.
      
      To mitigate, in affected hardware, all EPT superpages are marked NX.  
When an
      instruction fetch violation is observed against the superpage, the 
superpage
      is shattered to 4k and has execute permissions restored.  This prevents 
the
      guest kernel from being able to create the necessary preconditions in the 
iTLB
      to exploit the vulnerability.
      
      This does come with a workload-dependent performance overhead, caused by
      increased TLB pressure.  Performance can be restored, if guest kernels are
      trusted not to mount an attack, by specifying ept=exec-sp on the command 
line.
      
      This is part of XSA-304 / CVE-2018-12207
      
      Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
      Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx>
      Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>

Revision graph left in 
/home/logs/results/bisect/xen-4.11-testing/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.{dot,ps,png,html,svg}.
----------------------------------------
144146: tolerable ALL FAIL

flight 144146 xen-4.11-testing real-bisect [real]
http://logs.test-lab.xenproject.org/osstest/logs/144146/

Failures :-/ but no regressions.

Tests which did not succeed,
including tests which could not be run:
 test-amd64-amd64-qemuu-nested-intel 17 debian-hvm-install/l1/l2 fail baseline 
untested


jobs:
 test-amd64-amd64-qemuu-nested-intel                          fail    


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.