Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
MIME-Version: 1.0
In-Reply-To: <6e8a071e-0d5a-45d2-b2ef-4f6172ef4cff@redhat.com>
References: <1508420876-3780-1-git-send-email-wanpeng.li@hotmail.com>
 <CALMp9eQFEVLwV8ZW3HtO__rOfEd1Qs-ZJvqwT-5SAmU2zRonvA@mail.gmail.com> <6e8a071e-0d5a-45d2-b2ef-4f6172ef4cff@redhat.com>
From:   Jim Mattson <jmattson@google.com>
Date:   Thu, 2 Nov 2017 11:57:07 -0700
Message-ID: <CALMp9eRRG=LK8B3NzRVeuzC398Fx3g=RVtuAKzQ2yXtUbMTcow@mail.gmail.com>
Subject: Re: [PATCH v2] KVM: X86: #GP when guest attempts to write MCi_STATUS
 register w/o 0
To:     Paolo Bonzini <pbonzini@redhat.com>
Cc:     Wanpeng Li <kernellwp@gmail.com>,
        LKML <linux-kernel@vger.kernel.org>,
        kvm list <kvm@vger.kernel.org>,
        =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= <rkrcmar@redhat.com>,
        Wanpeng Li <wanpeng.li@hotmail.com>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

You're right, of course. My only remaining concern is that no real
hardware constrains these MSRs to three values as kvm does. On Intel
P6, only two values are allowed. On AMD CPUs, any value is allowed.

On Thu, Nov 2, 2017 at 10:35 AM, Paolo Bonzini <pbonzini@redhat.com> wrote:
> On 19/10/2017 20:09, Jim Mattson wrote:
>> "(offset & 0x3) == 1" seems like an obfuscated way of writing the
>> predicate, is_mci_status_msr(msr). But other than that, this change
>> looks fine to me.
>>
>> I'm a little more concerned about the code above. At the very least,
>> it needs to let the host set an arbitrary value for save/restore to
>> work.
>
> Why?  The guest cannot have written anything but the three allowed
> values, userspace cannot write anything else either outside save/restore
> without KVM_SET_MSR failing, and KVM itself (specifically
> kvm_vcpu_ioctl_x86_setup_mce) only ever initializes IA32_MCi_CTL to all
> ones.  So save will only ever find those three values, and restore's
> KVM_SET_MSR restore should never fail either.
>
> Thanks,
>
> Paolo
>
>> Reviewed-by: Jim Mattson <jmattson@google.com>
>

From 1582976676979369045@xxx Thu Nov 02 17:36:40 +0000 2017
X-GM-THRID: 1581694017601322414
X-Gmail-Labels: Inbox,Category Forums,HistoricalUnread