Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS

From	"Michael S. Tsirkin" <mst@redhat.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS
Date	2017-08-16 21:50 +0200
Message-ID	<ufcue-2Ob-9@gated-at.bofh.it> (permalink)
References	(2 earlier) <uf6f7-7t0-1@gated-at.bofh.it> <uf6oO-7w7-5@gated-at.bofh.it> <uf6Ia-7Ci-21@gated-at.bofh.it> <uf9PI-14p-7@gated-at.bofh.it> <ufaiL-1vO-45@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Aug 16, 2017 at 07:19:28PM +0200, Paolo Bonzini wrote:
> On 16/08/2017 18:50, Michael S. Tsirkin wrote:
> > On Wed, Aug 16, 2017 at 03:30:31PM +0200, Paolo Bonzini wrote:
> >> While you can filter out instruction fetches, that's not enough.  A data
> >> read could happen because someone pointed the IDT to MMIO area, and who
> >> knows what the VM-exit instruction length points to in that case.
> > 
> > Thinking more about it, I don't really see how anything
> > legal guest might be doing with virtio would trigger anything
> > but a fault after decoding the instruction. How does
> > skipping instruction even make sense in the example you give?
> 
> There's no such thing as a legal guest.  Anything that the hypervisor
> does, that differs from real hardware, is a possible escalation path.

Fast MMIO bus devices don't apprear out of thin air.

They appear because guest enabled a virtio device.

So it is a PV guest and if it doesn't behave according to the virtio
spec, it is going to crash.


> 
> This in fact makes me doubt the EMULTYPE_SKIP patch too.
> 
> >>>> Plus of course it wouldn't be guaranteed to work on nested.
> >>>
> >>> Not sure I got this one.
> >>
> >> Not all nested hypervisors are setting the VM-exit instruction length
> >> field on EPT violations, since it's documented not to be set.
> > 
> > So that's probably the real issue - nested virt which has to do it
> > in software at extra cost. We already limit this to intel processors,
> > how about we blacklist nested virt for this optimization?
> > 
> > I agree it's skating it a bit close to the dangerous edge,
> > but so are other tricks we play with PTEs to speed up MMIO.
> 
> Not at all.  Everything else we do is perfectly fine according to the
> spec, this one isn't.
> 
> Paolo

Virtio MMIO is kind of special in many ways.

What happens if I map and try to execute an MMIO BAR? I don't think it
will work, will it?


> >>>>>> Adding a hypercall or MSR write that does a fast MMIO write to a physical
> >>>>>> address would do it, but it adds hypervisor knowledge in virtio, including
> >>>>>> CPUID handling.
> >>>>>
> >>>>> Another issue is that it will break DPDK on virtio.
> >>>>
> >>>> Not break, just make it slower.
> >>>
> >>> I thought hypercalls can only be triggered from ring 0, userspace can't call them.
> >>> Dod I get it wrong?
> >>
> >> That's just a limitation that KVM makes on currently-defined hypercalls.
> >>
> >> VMCALL causes a vmexit if executed from ring 3.
> >>
> >> Paolo
> >

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 13:30 +0200
  Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Radim Krčmář <rkrcmar@redhat.com> - 2017-08-16 14:10 +0200
    Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 15:40 +0200
      Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 16:10 +0200
        Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 16:20 +0200
    Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS David Hildenbrand <david@redhat.com> - 2017-08-17 10:20 +0200
  Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 15:00 +0200
    Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 15:10 +0200
      Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 15:20 +0200
        Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 15:40 +0200
          Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 16:10 +0200
          Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 19:00 +0200
            Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 19:30 +0200
              Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Radim Krčmář <rkrcmar@redhat.com> - 2017-08-16 21:10 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 22:00 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-16 23:30 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-17 00:40 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-17 11:10 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Paolo Bonzini <pbonzini@redhat.com> - 2017-08-17 14:20 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Radim Krčmář <rkrcmar@redhat.com> - 2017-08-17 15:30 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-17 17:20 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS Radim Krčmář <rkrcmar@redhat.com> - 2017-08-17 16:00 +0200
                Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-17 17:30 +0200
              Re: [PATCH] kvm: x86: disable KVM_FAST_MMIO_BUS "Michael S. Tsirkin" <mst@redhat.com> - 2017-08-16 21:50 +0200

csiph-web