On Thu, Oct 29, 2009 at 04:38:22PM +0200, Avi Kivity wrote: > On 10/29/2009 02:23 PM, Michael S. Tsirkin wrote: >> On Thu, Oct 29, 2009 at 09:16:43AM +0000, Mark McLoughlin wrote: >> >>> I agree we shouldn't exit in this scenario >>> >> virtio in qemu generally seems to handle guest errors >> by calling exit(2). This probably makes it easier to notice >> the problems, but is likely not the right thing to do. >> > > Right, the thinking was the guest is shooting itself in the foot and > hitting, but a guest can delegate control of a device to unprivileged > code (for example device assignment in kvm), When we emulate iommu, yes. > which would allow this unprivileged code to kill the guest. With usb emulation, we can have: drivers/usb/class/usblp.c:343:static const char *usblp_messages[] = { "ok", "out of paper", "off-line", "on fire" }; > -- > error compiling committee.c: too many arguments to function -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html