From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paul Durrant <Paul.Durrant@citrix.com>
Subject: Re: [PATCH 1/1] x86/hvm: prevent hvm_free_ioreq_gmfn()
 clobber of arbitrary memory
Date: Thu, 23 Apr 2015 13:25:34 +0000
Message-ID: <9AAE0902D5BC7E449B7C8E4E778ABCD02588DF76@AMSPEX01CL01.citrite.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <xen-devel-bounces@lists.xen.org>
Content-Language: en-US
List-Unsubscribe: <http://lists.xen.org/cgi-bin/mailman/options/xen-devel>,
	<mailto:xen-devel-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xen.org>
List-Help: <mailto:xen-devel-request@lists.xen.org?subject=help>
List-Subscribe: <http://lists.xen.org/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xen.org?subject=subscribe>
Sender: xen-devel-bounces@lists.xen.org
Errors-To: xen-devel-bounces@lists.xen.org
To: "Jan Beulich (JBeulich@suse.com)" <JBeulich@suse.com>
Cc: Andrew Cooper <Andrew.Cooper3@citrix.com>, "Keir (Xen.org)" <keir@xen.org>, "Don Slutz (dslutz@verizon.com)" <dslutz@verizon.com>, "xen-devel@lists.xen.org" <xen-devel@lists.xen.org>
List-Id: xen-devel@lists.xenproject.org

Apologies for breaking the threading. The mail server ate the thread and I couldn't manage to get it back...

>[snip]
>> OK, here it is as a proper patch.  I still haven't tested it -- indeed
>> I'm not sure how to test multiple ioreq clients.  Any suggestions?
>
>Paul?
>
>Thanks, Jan

Testing multiple is a bit tricky... Best thing to do, I think, is:

- Configure an HVM guest to use latest upstream QEMU (post my patch 3996e85c1822e05c50250f8d2d1e57b6bea1229d), which will give you one non-default ioreq server.
- Grab my demu repo from xenbits (git://xenbits.xen.org/people/pauldu/demu.git) and build it (master branch should be ok).
- Bring up the guest paused
- Start demu from a dom0 root shell, e.g.:

demu --domain=<domid> --device=31 --function=0

- Unpause the domain

After it comes up you should be able to see device 31 on the PCI bus, and it should appear to be a SCSI controller.

  Paul