From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932926AbcKPQkO (ORCPT ); Wed, 16 Nov 2016 11:40:14 -0500 Received: from mail-ua0-f195.google.com ([209.85.217.195]:33496 "EHLO mail-ua0-f195.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932754AbcKPQkL (ORCPT ); Wed, 16 Nov 2016 11:40:11 -0500 MIME-Version: 1.0 In-Reply-To: <26413C89-E639-4834-A600-C4B6679162F2@gmail.com> References: <20161110234055.8654-1-khuey@kylehuey.com> <20161110234055.8654-8-khuey@kylehuey.com> <26413C89-E639-4834-A600-C4B6679162F2@gmail.com> From: Kyle Huey Date: Wed, 16 Nov 2016 08:40:09 -0800 Message-ID: Subject: Re: [PATCH v11 7/7] KVM: x86: virtualize cpuid faulting To: Nadav Amit Cc: "Robert O'Callahan" , Thomas Gleixner , Andy Lutomirski , Ingo Molnar , "H. Peter Anvin" , X86 ML , Paolo Bonzini , =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= , Jeff Dike , Richard Weinberger , Alexander Viro , Shuah Khan , Dave Hansen , Borislav Petkov , Peter Zijlstra , Boris Ostrovsky , Len Brown , "Rafael J. Wysocki" , Dmitry Safonov , David Matlack , LKML , "open list:USER-MODE LINUX (UML)" , "open list:USER-MODE LINUX (UML)" , "open list:FILESYSTEMS (VFS and infrastructure)" , "open list:KERNEL SELFTEST FRAMEWORK" , KVM Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Nov 11, 2016 at 12:54 PM, Nadav Amit wrote: > >> On Nov 10, 2016, at 3:40 PM, Kyle Huey wrote: >> >> Hardware support for faulting on the cpuid instruction is not required to >> emulate it, because cpuid triggers a VM exit anyways. KVM handles the relevant >> MSRs (MSR_PLATFORM_INFO and MSR_MISC_FEATURES_ENABLE) and upon a >> cpuid-induced VM exit checks the cpuid faulting state and the CPL. >> kvm_require_cpl is even kind enough to inject the GP fault for us. > > I think that for consistency you should also revise em_cpuid() of KVM > instruction emulator. Otherwise it may be a potential security > hazard (as far fetched as it currently seems). Hmm, ok. Do you know how I can test this code path? - Kyle