Re: AMD SEV-SNP/Intel TDX: validation of memory pages

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Feb 12, 2021 at 02:39:18PM -0800, Andi Kleen wrote:
> > But AFAI recursive #VE is entirely possible. The moment #VE reads that
> > ve_info thing, NMIs can happen, which can trigger another #VE which then
> > clobbers your stack and we're irrecoverably screwed again.
> 
> I don't believe we have anything currently in the NMI handler that
> would trigger #VE. While some operations may need TDCALL (like MSR
> accesses) those should be all directly hooked.
> 
> Also in general to avoid clobbering your stack you would just need
> to make sure to adjust the IST stack before you do anything that
> could cause another #VE.

NMI can touch user-pages, which then brings the on-demand #VE.




[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Bugtraq]     [Linux OMAP]     [Linux MIPS]     [eCos]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux