[0/3] Few nSVM bugfixes

Message

Maxim Levitsky Aug. 27, 2020, 4:27 p.m. UTC

This patch series contains few nested SVM fixes from
testing I did this weekend.

Patch #1 fixes issue where we were setting the GIF (global interrupt flag)
on first nested VMexit, after migration thus making the nested guest crash
from unexpected interrupts.

Patch #2 is my observation that we never setup nesed msr bitmap on nested
state load after migration.

Patch #3 was 'migrated' ;-) from my other patch series to make it smaller,
which is about more strict checks when we about to return to a nested guest,
from SMM.

Best regards,
	Maxim Levitsky

Maxim Levitsky (3):
  SVM: nSVM: correctly restore GIF on vmexit from nesting after
    migration
  SVM: nSVM: setup nested msr permission bitmap on nested state load
  KVM: nSVM: more strict SMM checks when returning to nested guest

 arch/x86/kvm/svm/nested.c |  7 ++++++-
 arch/x86/kvm/svm/svm.c    | 29 ++++++++++++++++++-----------
 2 files changed, 24 insertions(+), 12 deletions(-)

Comments

Paolo Bonzini Sept. 12, 2020, 4:32 p.m. UTC | #1

On 27/08/20 18:27, Maxim Levitsky wrote:
> This patch series contains few nested SVM fixes from
> testing I did this weekend.
> 
> Patch #1 fixes issue where we were setting the GIF (global interrupt flag)
> on first nested VMexit, after migration thus making the nested guest crash
> from unexpected interrupts.
> 
> Patch #2 is my observation that we never setup nesed msr bitmap on nested
> state load after migration.
> 
> Patch #3 was 'migrated' ;-) from my other patch series to make it smaller,
> which is about more strict checks when we about to return to a nested guest,
> from SMM.
> 
> Best regards,
> 	Maxim Levitsky
> 
> Maxim Levitsky (3):
>   SVM: nSVM: correctly restore GIF on vmexit from nesting after
>     migration
>   SVM: nSVM: setup nested msr permission bitmap on nested state load
>   KVM: nSVM: more strict SMM checks when returning to nested guest
> 
>  arch/x86/kvm/svm/nested.c |  7 ++++++-
>  arch/x86/kvm/svm/svm.c    | 29 ++++++++++++++++++-----------
>  2 files changed, 24 insertions(+), 12 deletions(-)
> 

Queued, thanks.

Paolo