x86: don't leak ST(n)/XMMn values to domains first using them
authorJan Beulich <jbeulich@suse.com>
Thu, 17 Dec 2015 13:22:13 +0000 (14:22 +0100)
committerJan Beulich <jbeulich@suse.com>
Thu, 17 Dec 2015 13:22:13 +0000 (14:22 +0100)
commit81818b3f277544535974204f8d840da86fa8a44f
tree5be342ede8acd17b7655003479113c5572498647
parent7458d585358834cfb6c6fabb02009a646d42f105
x86: don't leak ST(n)/XMMn values to domains first using them

FNINIT doesn't alter these registers, and hence using it is
insufficient to initialize a guest's initial state.

This is CVE-2015-8555 / XSA-165.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
xen/arch/x86/domain.c
xen/arch/x86/i387.c