| commit | 3dbe141595faa48a067add3e47bba3205b79d33c | [log] [tgz] |
|---|---|---|
| author | Avi Kivity <avi@redhat.com> | Wed May 12 11:48:18 2010 +0300 |
| committer | Avi Kivity <avi@redhat.com> | Wed May 19 11:41:09 2010 +0300 |
| tree | a7d37004d0021298ed305810543ae6a3a4ed79e2 | |
| parent | a3d204e28579427609c3d15d2310127ebaa47d94 [diff] |
KVM: MMU: Segregate shadow pages with different cr0.wp When cr0.wp=0, we may shadow a gpte having u/s=1 and r/w=0 with an spte having u/s=0 and r/w=1. This allows excessive access if the guest sets cr0.wp=1 and accesses through this spte. Fix by making cr0.wp part of the base role; we'll have different sptes for the two cases and the problem disappears. Signed-off-by: Avi Kivity <avi@redhat.com> Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>