KVM: VMX: avoid double list add with VT-d posted interrupts
authorPaolo Bonzini <pbonzini@redhat.com>
Tue, 6 Jun 2017 10:57:05 +0000 (12:57 +0200)
committerpopcornmix <popcornmix@gmail.com>
Fri, 6 Oct 2017 12:06:51 +0000 (13:06 +0100)
commitc4a7b2eda3f398dd3e2d9981ddacc7c9745efe52
tree6fbb370b5c6066dc65c7f0f639f7a8ecdff7cb9e
parent7c64ccefcc54583bed3283f94216c6f52b1220cd
KVM: VMX: avoid double list add with VT-d posted interrupts

commit 8b306e2f3c41939ea528e6174c88cfbfff893ce1 upstream.

In some cases, for example involving hot-unplug of assigned
devices, pi_post_block can forget to remove the vCPU from the
blocked_vcpu_list.  When this happens, the next call to
pi_pre_block corrupts the list.

Fix this in two ways.  First, check vcpu->pre_pcpu in pi_pre_block
and WARN instead of adding the element twice in the list.  Second,
always do the list removal in pi_post_block if vcpu->pre_pcpu is
set (not -1).

The new code keeps interrupts disabled for the whole duration of
pi_pre_block/pi_post_block.  This is not strictly necessary, but
easier to follow.  For the same reason, PI.ON is checked only
after the cmpxchg, and to handle it we just call the post-block
code.  This removes duplication of the list removal code.

Cc: Huangweidong <weidong.huang@huawei.com>
Cc: Gonglei <arei.gonglei@huawei.com>
Cc: wangxin <wangxinxin.wang@huawei.com>
Cc: Radim Krčmář <rkrcmar@redhat.com>
Tested-by: Longpeng (Mike) <longpeng2@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/x86/kvm/vmx.c