Messages in this thread | | | From | Kees Cook <> | Date | Fri, 20 Oct 2017 20:04:11 -0700 | Subject | Re: [PATCH 00/23] Hardened usercopy whitelisting |
| |
On Fri, Oct 20, 2017 at 4:25 PM, Paolo Bonzini <pbonzini@redhat.com> wrote: > On 21/10/2017 00:40, Paolo Bonzini wrote: >> This breaks KVM completely on x86, due to two ioctls >> (KVM_GET/SET_CPUID2) accessing the cpuid_entries field of struct >> kvm_vcpu_arch. >> >> There's also another broken ioctl, KVM_XEN_HVM_CONFIG, but it is >> obsolete and not a big deal at all. >> >> I can post some patches, but probably not until the beginning of >> November due to travelling. Please do not send this too close to the >> beginning of the merge window. > > Sleeping is overrated, sending patches now...
Oh awesome, thank you very much for tracking this down and building fixes!
I'll insert these into the usercopy whitelisting series, and see if I can find any similar cases.
Thanks!
-Kees
-- Kees Cook Pixel Security
| |