x86/xsave: properly check guest input to XSETBV
authorJan Beulich <jbeulich@suse.com>
Tue, 4 Jun 2013 07:29:07 +0000 (09:29 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 4 Jun 2013 07:29:07 +0000 (09:29 +0200)
commit365c95f7de789e1dca03f119eab7dc61fe0f77c9
tree49b15e15658f7efdf5327e669ad1f0f1ba8393cd
parentc6ae65db36b98f2866f74a9a7ae6ac5d51fedc67
x86/xsave: properly check guest input to XSETBV

Other than the HVM emulation path, the PV case so far failed to check
that YMM state requires SSE state to be enabled, allowing for a #GP to
occur upon passing the inputs to XSETBV inside the hypervisor.

This is CVE-2013-2078 / XSA-54.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/traps.c