Do not allow HVM save/restore of a dying domain.
authorKeir Fraser <keir.fraser@citrix.com>
Wed, 2 Jul 2008 16:10:52 +0000 (17:10 +0100)
committerKeir Fraser <keir.fraser@citrix.com>
Wed, 2 Jul 2008 16:10:52 +0000 (17:10 +0100)
commitb4d58083caad3c6317877a8404262a28dd437e88
tree5c953b5466526a18e57ea56d9614ddb9e2801ce4
parentde4e0840642f41b2a0feef8a97afc360c734bb2b
Do not allow HVM save/restore of a dying domain.

It's not a sensible thing to do, and it is easier than auditing all
state save/restore functions for safety (most importantly, racing
against domain_relinquish_resources).

Also place a spin_barrier on domain_lock after asserting d->is_dying,
allowing critical regions under the domain_lock to safely check
is_dying and avoid races with domain_relinquish_resources().

Signed-off-by: Keir Fraser <keir.fraser@citrix.com>
xen/common/domain.c
xen/common/hvm/save.c