From mboxrd@z Thu Jan 1 00:00:00 1970 From: Platform Team regression test user Subject: [xen-4.4-testing baseline-only test] 44165: trouble: broken/pass Date: Fri, 26 Feb 2016 14:33:26 +0000 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7742914530073359204==" Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: xen-devel@lists.xensource.com, osstest-admin@xenproject.org List-Id: xen-devel@lists.xenproject.org --===============7742914530073359204== Content-Type: text/plain This run is configured for baseline tests only. flight 44165 xen-4.4-testing real [real] http://osstest.xs.citrite.net/~osstest/testlogs/logs/44165/ Failures and problems with tests :-( Tests which did not succeed and are blocking, including tests which could not be run: build-amd64-libvirt broken test-amd64-amd64-xl-qemuu-ovmf-amd64 broken test-armhf-armhf-xl-vhd broken test-amd64-amd64-pv broken test-amd64-i386-pair broken test-armhf-armhf-xl-multivcpu broken test-amd64-i386-qemuu-rhel6hvm-intel broken test-amd64-i386-qemut-rhel6hvm-intel broken test-amd64-i386-xl-qemuu-ovmf-amd64 broken test-amd64-i386-pv broken test-amd64-amd64-xl-qemuu-winxpsp3 broken test-amd64-amd64-amd64-pvgrub broken test-amd64-i386-qemut-rhel6hvm-amd broken test-armhf-armhf-libvirt broken test-amd64-i386-xl-qemuu-winxpsp3-vcpus1 broken test-amd64-i386-freebsd10-amd64 broken test-amd64-i386-rumpuserxen-i386 broken test-amd64-amd64-xl-qemuu-debianhvm-amd64 broken test-amd64-amd64-xl-credit2 broken test-amd64-amd64-pygrub broken test-amd64-amd64-libvirt-pair broken test-amd64-i386-xl-qemut-winxpsp3-vcpus1 broken test-amd64-i386-xl-raw broken test-armhf-armhf-libvirt-qcow2 broken test-amd64-amd64-xl-qcow2 broken test-amd64-amd64-qemuu-nested-amd broken test-armhf-armhf-xl-midway broken test-amd64-i386-libvirt broken build-armhf-libvirt broken test-amd64-amd64-pair broken test-amd64-amd64-xl-multivcpu broken build-amd64-rumpuserxen broken test-amd64-amd64-rumpuserxen-amd64 broken test-amd64-i386-freebsd10-i386 broken build-i386-libvirt broken test-amd64-i386-libvirt-pair broken test-amd64-amd64-xl broken test-amd64-i386-xl-qemut-win7-amd64 broken test-armhf-armhf-xl-credit2 broken test-amd64-amd64-xl-qemuu-win7-amd64 broken test-amd64-amd64-libvirt broken test-armhf-armhf-xl broken test-amd64-i386-xend-qemut-winxpsp3 broken test-amd64-i386-xl-qemuu-win7-amd64 broken test-amd64-amd64-xl-qemut-winxpsp3 broken test-amd64-amd64-libvirt-vhd broken test-amd64-amd64-xl-qemut-debianhvm-amd64 broken test-armhf-armhf-libvirt-raw broken test-amd64-amd64-qemuu-nested-intel broken test-amd64-i386-xl-qemut-debianhvm-amd64 broken test-amd64-amd64-xl-qemut-win7-amd64 broken test-amd64-amd64-i386-pvgrub broken test-amd64-i386-xl-qemuu-debianhvm-amd64 broken test-amd64-i386-qemuu-rhel6hvm-amd broken build-i386-rumpuserxen broken test-amd64-i386-xl broken version targeted for testing: xen 02426e9202336bb666464d84f0537874689b30fc baseline version: xen a611ed5d040a764e01edcc8b6d99342c393589d9 Last test of basis 38699 2016-01-26 09:48:16 Z 31 days Testing same since 44165 2016-02-26 11:49:23 Z 0 days 1 attempts ------------------------------------------------------------ People who touched revisions under test: Andrew Cooper Jan Beulich jobs: build-amd64-xend pass build-i386-xend pass build-amd64 pass build-armhf pass build-i386 pass build-amd64-libvirt broken build-armhf-libvirt broken build-i386-libvirt broken build-amd64-pvops pass build-armhf-pvops pass build-i386-pvops pass build-amd64-rumpuserxen broken build-i386-rumpuserxen broken test-amd64-amd64-xl broken test-armhf-armhf-xl broken test-amd64-i386-xl broken test-amd64-amd64-qemuu-nested-amd broken test-amd64-i386-qemut-rhel6hvm-amd broken test-amd64-i386-qemuu-rhel6hvm-amd broken test-amd64-amd64-xl-qemut-debianhvm-amd64 broken test-amd64-i386-xl-qemut-debianhvm-amd64 broken test-amd64-amd64-xl-qemuu-debianhvm-amd64 broken test-amd64-i386-xl-qemuu-debianhvm-amd64 broken test-amd64-i386-freebsd10-amd64 broken test-amd64-amd64-xl-qemuu-ovmf-amd64 broken test-amd64-i386-xl-qemuu-ovmf-amd64 broken test-amd64-amd64-rumpuserxen-amd64 broken test-amd64-amd64-xl-qemut-win7-amd64 broken test-amd64-i386-xl-qemut-win7-amd64 broken test-amd64-amd64-xl-qemuu-win7-amd64 broken test-amd64-i386-xl-qemuu-win7-amd64 broken test-amd64-amd64-xl-credit2 broken test-armhf-armhf-xl-credit2 broken test-amd64-i386-freebsd10-i386 broken test-amd64-i386-rumpuserxen-i386 broken test-amd64-amd64-qemuu-nested-intel broken test-amd64-i386-qemut-rhel6hvm-intel broken test-amd64-i386-qemuu-rhel6hvm-intel broken test-amd64-amd64-libvirt broken test-armhf-armhf-libvirt broken test-amd64-i386-libvirt broken test-armhf-armhf-xl-midway broken test-amd64-amd64-xl-multivcpu broken test-armhf-armhf-xl-multivcpu broken test-amd64-amd64-pair broken test-amd64-i386-pair broken test-amd64-amd64-libvirt-pair broken test-amd64-i386-libvirt-pair broken test-amd64-amd64-pv broken test-amd64-i386-pv broken test-amd64-amd64-amd64-pvgrub broken test-amd64-amd64-i386-pvgrub broken test-amd64-amd64-pygrub broken test-armhf-armhf-libvirt-qcow2 broken test-amd64-amd64-xl-qcow2 broken test-armhf-armhf-libvirt-raw broken test-amd64-i386-xl-raw broken test-amd64-i386-xl-qemut-winxpsp3-vcpus1 broken test-amd64-i386-xl-qemuu-winxpsp3-vcpus1 broken test-amd64-amd64-libvirt-vhd broken test-armhf-armhf-xl-vhd broken test-amd64-i386-xend-qemut-winxpsp3 broken test-amd64-amd64-xl-qemut-winxpsp3 broken test-amd64-amd64-xl-qemuu-winxpsp3 broken ------------------------------------------------------------ sg-report-flight on osstest.xs.citrite.net logs: /home/osstest/logs images: /home/osstest/images Logs, config files, etc. are available at http://osstest.xs.citrite.net/~osstest/testlogs/logs Test harness code can be found at http://xenbits.xensource.com/gitweb?p=osstest.git;a=summary broken-job build-amd64-libvirt broken broken-job test-amd64-amd64-xl-qemuu-ovmf-amd64 broken broken-job test-armhf-armhf-xl-vhd broken broken-job test-amd64-amd64-pv broken broken-job test-amd64-i386-pair broken broken-job test-armhf-armhf-xl-multivcpu broken broken-job test-amd64-i386-qemuu-rhel6hvm-intel broken broken-job test-amd64-i386-qemut-rhel6hvm-intel broken broken-job test-amd64-i386-xl-qemuu-ovmf-amd64 broken broken-job test-amd64-i386-pv broken broken-job test-amd64-amd64-xl-qemuu-winxpsp3 broken broken-job test-amd64-amd64-amd64-pvgrub broken broken-job test-amd64-i386-qemut-rhel6hvm-amd broken broken-job test-armhf-armhf-libvirt broken broken-job test-amd64-i386-xl-qemuu-winxpsp3-vcpus1 broken broken-job test-amd64-i386-freebsd10-amd64 broken broken-job test-amd64-i386-rumpuserxen-i386 broken broken-job test-amd64-amd64-xl-qemuu-debianhvm-amd64 broken broken-job test-amd64-amd64-xl-credit2 broken broken-job test-amd64-amd64-pygrub broken broken-job test-amd64-amd64-libvirt-pair broken broken-job test-amd64-i386-xl-qemut-winxpsp3-vcpus1 broken broken-job test-amd64-i386-xl-raw broken broken-job test-armhf-armhf-libvirt-qcow2 broken broken-job test-amd64-amd64-xl-qcow2 broken broken-job test-amd64-amd64-qemuu-nested-amd broken broken-job test-armhf-armhf-xl-midway broken broken-job test-amd64-i386-libvirt broken broken-job build-armhf-libvirt broken broken-job test-amd64-amd64-pair broken broken-job test-amd64-amd64-xl-multivcpu broken broken-job build-amd64-rumpuserxen broken broken-job test-amd64-amd64-rumpuserxen-amd64 broken broken-job test-amd64-i386-freebsd10-i386 broken broken-job build-i386-libvirt broken broken-job test-amd64-i386-libvirt-pair broken broken-job test-amd64-amd64-xl broken broken-job test-amd64-i386-xl-qemut-win7-amd64 broken broken-job test-armhf-armhf-xl-credit2 broken broken-job test-amd64-amd64-xl-qemuu-win7-amd64 broken broken-job test-amd64-amd64-libvirt broken broken-job test-armhf-armhf-xl broken broken-job test-amd64-i386-xend-qemut-winxpsp3 broken broken-job test-amd64-i386-xl-qemuu-win7-amd64 broken broken-job test-amd64-amd64-xl-qemut-winxpsp3 broken broken-job test-amd64-amd64-libvirt-vhd broken broken-job test-amd64-amd64-xl-qemut-debianhvm-amd64 broken broken-job test-armhf-armhf-libvirt-raw broken broken-job test-amd64-amd64-qemuu-nested-intel broken broken-job test-amd64-i386-xl-qemut-debianhvm-amd64 broken broken-job test-amd64-amd64-xl-qemut-win7-amd64 broken broken-job test-amd64-amd64-i386-pvgrub broken broken-job test-amd64-i386-xl-qemuu-debianhvm-amd64 broken broken-job test-amd64-i386-qemuu-rhel6hvm-amd broken broken-job build-i386-rumpuserxen broken broken-job test-amd64-i386-xl broken Push not applicable. ------------------------------------------------------------ commit 02426e9202336bb666464d84f0537874689b30fc Author: Andrew Cooper Date: Thu Feb 18 15:28:25 2016 +0100 x86: fix unintended fallthrough case from XSA-154 ... and annotate the other deliberate one: Coverity objects otherwise. Signed-off-by: Andrew Cooper One of the two instances was actually a bug. Signed-off-by: Jan Beulich master commit: 8dd6d1c099865ee5f5916616a0ca79cd943c46f9 master date: 2016-02-18 15:10:07 +0100 commit 46b8f780d307b37c38c5a104972c3595724395c5 Author: Jan Beulich Date: Wed Feb 17 16:52:25 2016 +0100 x86/VMX: sanitize rIP before re-entering guest ... to prevent guest user mode arranging for a guest crash (due to failed VM entry). (On the AMD system I checked, hardware is doing exactly the canonicalization being added here.) Note that fixing this in an architecturally correct way would be quite a bit more involved: Making the x86 instruction emulator check all branch targets for validity, plus dealing with invalid rIP resulting from update_guest_eip() or incoming directly during a VM exit. The only way to get the latter right would be by not having hardware do the injection. Note further that there are a two early returns from vmx_vmexit_handler(): One (through vmx_failed_vmentry()) leads to domain_crash() anyway, and the other covers real mode only and can neither occur with a non-canonical rIP nor result in an altered rIP, so we don't need to force those paths through the checking logic. This is CVE-2016-2271 / XSA-170. Reported-by: 刘令 Signed-off-by: Jan Beulich Reviewed-by: Andrew Cooper Tested-by: Andrew Cooper master commit: ffbbfda37782a2408953af1a3e00ada80bb141bc master date: 2016-02-17 16:18:08 +0100 commit ff87c9a0ce27008f3bce99a343e1cdb2dbb9cb8a Author: Jan Beulich Date: Wed Feb 17 16:51:44 2016 +0100 x86: enforce consistent cachability of MMIO mappings We've been told by Intel that inconsistent cachability between multiple mappings of the same page can affect system stability only when the affected page is an MMIO one. Since the stale data issue is of no relevance to the hypervisor (since all guest memory accesses go through proper accessors and validation), handling of RAM pages remains unchanged here. Any MMIO mapped by domains however needs to be done consistently (all cachable mappings or all uncachable ones), in order to avoid Machine Check exceptions. Since converting existing cachable mappings to uncachable (at the time an uncachable mapping gets established) would in the PV case require tracking all mappings, allow MMIO to only get mapped uncachable (UC, UC-, or WC). This also implies that in the PV case we mustn't use the L1 PTE update fast path when cachability flags get altered. Since in the HVM case at least for now we want to continue honoring pinned cachability attributes for pages not mapped by the hypervisor, special case handling of r/o MMIO pages (forcing UC) gets added there. Arguably the counterpart change to p2m-pt.c may not be necessary, since UC- (which already gets enforced there) is probably strict enough. Note that the shadow code changes include fixing the write protection of r/o MMIO ranges: shadow_l1e_remove_flags() and its siblings, other than l1e_remove_flags() and alike, return the new PTE (and hence ignoring their return values makes them no-ops). This is CVE-2016-2270 / XSA-154. Signed-off-by: Jan Beulich Acked-by: Andrew Cooper master commit: c61a6f74f80eb36ed83a82f713db3143159b9009 master date: 2016-02-17 16:16:53 +0100 (qemu changes not included) --===============7742914530073359204== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMueGVuLm9y Zy94ZW4tZGV2ZWwK --===============7742914530073359204==--