From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Jan Beulich" Subject: Re: hap_invlpg() vs INVLPGA Date: Fri, 29 Jan 2016 08:53:54 -0700 Message-ID: <56AB992202000078000CC72C@prv-mh.provo.novell.com> References: <56AB761F02000078000CC667@prv-mh.provo.novell.com> <56AB6FB7.7030003@amazon.de> <56AB70FE.9030906@amazon.de> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1aPBMy-0005Qy-Ok for xen-devel@lists.xenproject.org; Fri, 29 Jan 2016 15:53:56 +0000 In-Reply-To: <56AB70FE.9030906@amazon.de> Content-Disposition: inline List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Christoph Egger Cc: xen-devel List-Id: xen-devel@lists.xenproject.org >>> On 29.01.16 at 15:02, wrote: > On 29/01/16 14:57, Egger, Christoph wrote: >> On 29/01/16 14:24, Jan Beulich wrote: >>> Christoph, >>> >>> in commit dd6de3ab99 ("Implement Nested-on-Nested") you added >>> code to hap_invlpg() supposedly emulating INVLPGA. I've been >>> stumbling across this a number of times in the past, not being able >>> to make the connection between (a) VMX/EPT and INVLPGA and >>> (b) SVM's INVLPGA intercept and this function. >> >> When you boot Windows 7 as L1 guest and XP-Mode as L2 guest then >> L2 guest uses INVLPG instruction to invalidate a page and L1 guest >> handles this via using INVLPGA instruction. >> >> The INVLPG intercept flushes the nested hap p2m which is effectively >> a TLB flush to the L1 guest. > > ... actually to the L2 guest. Sorry for the typo. So if the L1 guest does an INVLPGA, we should see an INVLPGA intercept, not an INVLPG one. >> Then this intercept is injected into L1 guest. This, otoh, reads as if you imply we intercept the L2's INVLPG. Yet the INVLPG intercept gets cleared when the domain uses NPT (and your original change also didn't alter any intercept settings). Hence I'm still lost how hap_invlpg() can be reached in that case other than via emulating INVLPG in the instruction emulator. >> The INVLPGA instruction enforces a new ASID. >> >> If the nested hap p2m is NULL then p2m_flush() should effectively >> be a noop but it may not crash the guest. s/may not/should not/ ? Jan