In this version, patch# 1 has been updated in that all the tests are run
with "use TPR shadow" set. Everything else remains the same.
According to section "Checks on VMX Controls" in Intel SDM vol 3C, the
following checks needs to be enforced on vmentry of L2 guests:
i) If the "use TPR shadow" VM-execution control is 0, the following
VM-execution controls must also be 0: "virtualize x2APIC mode",
"APIC-register virtualization" and "virtual-interrupt delivery".
ii) If the "virtualize x2APIC mode" VM-execution control is 1, the
"virtualize APIC accesses" VM-execution control must be 0.
Existing KVM code already enforces these checks. These patches are adding the
corresponding unit tests.
[kvm-unit-test 1/2] nVMX x86: APIC virtual controls must be unset if
[kvm-unit-test 2/2] nVMX x86: "virtualize APIC accesses" must be
x86/vmx_tests.c | 159 ++++++++++++++++++++++++++++++++++++++++++++++++++++++-
1 file changed, 157 insertions(+), 2 deletions(-)
Krish Sadhukhan (2):
nVMX x86: APIC virtual controls must be unset if "Use TPR shadow" is unset
nVMX x86: "virtualize APIC accesses" must be unset if "virtualize x2APIC" is set
