From: sos22@douglas.cl.cam.ac.uk <sos22@douglas.cl.cam.ac.uk>
Date: Thu, 26 Jan 2006 13:39:12 +0000 (+0100)
Subject: Explicitly block attempts to mutate the M2P tables of shadow mode
X-Git-Tag: archive/raspbian/4.8.0-1+rpi1~1^2~16528
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/success//%22http:/www.example.com/cgi/success/?a=commitdiff_plain;h=10abec27f5e4bab67c66f9095db3bafe24369a2a;p=xen.git

Explicitly block attempts to mutate the M2P tables of shadow mode
guests once they're running.

Signed-off-by: Steven Smith, sos22@cam.ac.uk
---

diff --git a/xen/arch/x86/mm.c b/xen/arch/x86/mm.c
index 1145af22b9..6ef37a7850 100644
--- a/xen/arch/x86/mm.c
+++ b/xen/arch/x86/mm.c
@@ -2152,35 +2152,22 @@ int do_mmu_update(
 
         case MMU_MACHPHYS_UPDATE:
 
-            mfn = req.ptr >> PAGE_SHIFT;
-            gpfn = req.val;
-
-            /* HACK ALERT...  Need to think about this some more... */
-            if ( unlikely(shadow_mode_translate(FOREIGNDOM) && IS_PRIV(d)) )
-            {
-                shadow_lock(FOREIGNDOM);
-                printk("privileged guest dom%d requests pfn=%lx to "
-                       "map mfn=%lx for dom%d\n",
-                       d->domain_id, gpfn, mfn, FOREIGNDOM->domain_id);
-                set_pfn_from_mfn(mfn, gpfn);
-                set_p2m_entry(FOREIGNDOM, gpfn, mfn, &sh_mapcache, &mapcache);
-                okay = 1;
-                shadow_unlock(FOREIGNDOM);
+            if (shadow_mode_translate(FOREIGNDOM)) {
+                /* We don't allow translate mode guests to have their
+                   M2P tables mutated while they're running. */
+                okay = 0;
                 break;
             }
 
+            mfn = req.ptr >> PAGE_SHIFT;
+            gpfn = req.val;
+
             if ( unlikely(!get_page_from_pagenr(mfn, FOREIGNDOM)) )
             {
                 MEM_LOG("Could not get page for mach->phys update");
                 break;
             }
 
-            if ( unlikely(shadow_mode_translate(FOREIGNDOM) && !IS_PRIV(d)) )
-            {
-                MEM_LOG("can't mutate the m2p of translated guests");
-                break;
-            }
-
             set_pfn_from_mfn(mfn, gpfn);
             okay = 1;