On 12/10/06 07:26, "Chris Wright" <chrisw@xxxxxxxxxxxx> wrote:
> Haven't worked out exactly what's causing the bug, but in testing the
> pv_ops tree against current Xen (11736:f7d65fb7299b) I can reliably
> crash Xen with the following trace, caused by:
>
> arch/x86/traps.c::handle_gdt_ldt_mapping_fault()
> ...
> /* Should never fault in another vcpu's area. */
> BUG_ON(vcpu_area != current->vcpu_id);
The shadow-refcount code is quite fresh. We should confirm this isn't
exploitable by ordinary PV guests though.
-- Keir
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel