On 11/07/2018 01:16, Krish Sadhukhan wrote: > In this version, patch# 1 has been updated in that all the tests are run > with "use TPR shadow" set. Everything else remains the same. > > > According to section "Checks on VMX Controls" in Intel SDM vol 3C, the > following checks needs to be enforced on vmentry of L2 guests: > > i) If the "use TPR shadow" VM-execution control is 0, the following > VM-execution controls must also be 0: "virtualize x2APIC mode", > "APIC-register virtualization" and "virtual-interrupt delivery". > > ii) If the "virtualize x2APIC mode" VM-execution control is 1, the > "virtualize APIC accesses" VM-execution control must be 0. > > Existing KVM code already enforces these checks. These patches are adding the > corresponding unit tests. > > > [kvm-unit-test 1/2] nVMX x86: APIC virtual controls must be unset if > [kvm-unit-test 2/2] nVMX x86: "virtualize APIC accesses" must be > > x86/vmx_tests.c | 159 ++++++++++++++++++++++++++++++++++++++++++++++++++++++- > 1 file changed, 157 insertions(+), 2 deletions(-) > > Krish Sadhukhan (2): > nVMX x86: APIC virtual controls must be unset if "Use TPR shadow" is unset > nVMX x86: "virtualize APIC accesses" must be unset if "virtualize x2APIC" is set > Pushed, thanks. Paolo
