More do_iret() fixes. We need to take care in restoring
authorkaf24@firebug.cl.cam.ac.uk <kaf24@firebug.cl.cam.ac.uk>
Wed, 11 Jan 2006 19:14:27 +0000 (20:14 +0100)
committerkaf24@firebug.cl.cam.ac.uk <kaf24@firebug.cl.cam.ac.uk>
Wed, 11 Jan 2006 19:14:27 +0000 (20:14 +0100)
commit8a790edb70aa0745d5cb25eceba8ab077a36efe4
tree40f7607bab9df9f66c0e5e063a07cbe8082b8514
parent5ccd14f4ccd029499f4775c360cf0e32ce128ec1
More do_iret() fixes. We need to take care in restoring
EFLAGS that we do not pull in non-zero IOPL, then crash
the domain, and then bug out when dom0 gets vcpu context.
This could otherwise be triggered by a malicious guest.

Signed-off-by: Keir Fraser <keir@xensource.com>
xen/arch/x86/x86_32/traps.c