Hi Baoquan, If old tables are corrupted, we will see the DMAR faults or INTR faults (which we have seen), or some other error messages. Most of these messages are from hardware. This means, hardware will do some check when running. But I don't think hardware will completely check the tables. Till now, I do not have a good idea to do the check in kdump kernel. Thanks Zhenhua On 04/28/2015 04:54 PM, Baoquan He wrote: > On 04/24/15 at 04:49pm, Dave Young wrote: >> On 04/24/15 at 04:35pm, Baoquan He wrote: >>> On 04/24/15 at 04:25pm, Dave Young wrote: >>>> Hi, Baoquan >>>> >>>>> I support this patchset. >>>>> >>>>> We should not fear oldmem since reserved crashkernel region is similar. >>>>> No one can guarantee that any crazy code won't step into crashkernel >>>>> region just because 1st kernel says it's reversed for kdump kernel. Here >>>>> the root table and context tables are also not built to allow legal code >>>>> to danamge. Both of them has the risk to be corrupted, for trying our >>>>> best to get a dumped vmcore the risk is worth being taken. >>>> >>>> old mem is mapped in 1st kernel so compare with the reserved crashkernel >>>> they are more likely to be corrupted. they are totally different. >>> >>> Could you tell how and why they are different? Wrong code will choose >>> root tables and context tables to danamge when they totally lose >>> control? >> >> iommu will map io address to system ram, right? not to reserved ram, but >> yes I'm assuming the page table is right, but I was worrying they are corrupted >> while kernel panic is happening. > > OK, I think we may need to think more about the old context tables > reuse. Currently dmar faults will cause error or warning message, > occasionally will cause system with iommu hang in kdump kernel. I don't > know what will happen if old root tables or context tables are corrupted > by evil code. For kdump kernel which use the similar mechanism there's a > verification. When load kdump kernel into reserved crashkernel region a > sha256 sum is calculated, then verify it when jump into kdump kernel > after panic. If corrupted context tables will bring worse result, then > we need consider giving it up and change back to the old way and try > to dump though there's error message. > > Hi Zhenhua, > > I don't know what's your plan about verification whether old root tables > or old context tables are corrupted. Or have you experimented that what > will happen if old tables are corrupted on purpose. > > I am fine if you just put this in a TODO list since that's truly in a > rare case. But it maybe necessary to tell it in patch log. > > Thanks > Baoquan >
