{"push_id":1429944305,"size":10,"distinct_size":0,"ref":"refs/heads/coverity-tested/smoke","head":"a7a578ce6b8634eec30cb8445ea98e18d9b4e9b8","before":"1c524dd494019bc98e23075dcdba11c8e6add017","commits":[{"sha":"99a10da1b4fee8ef7a096e5fd3608f6c15932eb0","author":{"name":"Andrew Cooper","email":"ce6e7acce1f5d55db389f61db68b4ce33f3ea3e3@citrix.com"},"message":"x86/cpu: reposition stack alignment check\n\nAs identified during review, using BUG_ON() before `lidt` will result in a\ntriple fault, even on APs.\n\nSigned-off-by: Andrew Cooper <andrew.cooper3@citrix.com>\nReviewed-by: Jan Beulich <jbeulich@suse.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/99a10da1b4fee8ef7a096e5fd3608f6c15932eb0"},{"sha":"2cf7d2bafb9b68add1710b8c3f7ecad58e53a9db","author":{"name":"Wei Chen","email":"5e030967834f35ff077462eba65c9d2032b73b2e@arm.com"},"message":"arm64: handle guest-generated EL1 asynchronous abort\n\nIn current code, when the hypervisor receives an asynchronous abort\nfrom a guest, the hypervisor will do panic, the host will be down.\nWe have to prevent such security issue, so, in this patch we crash\nthe guest, when the hypervisor receives an asynchronous abort from\nthe guest.\n\nThis is part of XSA-201.\n\nSigned-off-by: Wei Chen <Wei.Chen@arm.com>\nReviewed-by: Stefano Stabellini <sstabellini@kernel.org>\nReviewed-by: Steve Capper <steve.capper@arm.com>\nReviewed-by: Julien Grall <Julien.Grall@arm.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/2cf7d2bafb9b68add1710b8c3f7ecad58e53a9db"},{"sha":"36008800e81bc061cce1fd204a0b638f9dc61c70","author":{"name":"Wei Chen","email":"5e030967834f35ff077462eba65c9d2032b73b2e@arm.com"},"message":"arm64: handle async aborts delivered while at EL2\n\nIf EL1 generates an asynchronous abort and then traps into EL2\n(by HVC or IRQ) before the abort has been delivered, the hypervisor\ncould not catch it, because the PSTATE.A bit is masked all the time\nin hypervisor. So this asynchronous abort may be slipped to next\nrunning guest with PSTATE.A bit unmasked.\n\nIn order to avoid this, it is necessary to take the abort at EL2, by\nclearing the PSTATE.A bit. In this patch, we unmask the PSTATE.A bit\nto open a window to catch guest-generated asynchronous abort in all\nEL1 -> EL2 swich paths. If we catched such asynchronous abort in\nchecking window, the hyp_error exception will be triggered and the\nabort source guest will be crashed.\n\nThis is part of XSA-201.\n\nSigned-off-by: Wei Chen <Wei.Chen@arm.com>\nReviewed-by: Julien Grall <julien.grall@arm.com>\nAcked-by: Stefano Stabellini <sstabellini@kernel.org>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/36008800e81bc061cce1fd204a0b638f9dc61c70"},{"sha":"f8c6a9334b251d2e78b0873a71b4d369908fb123","author":{"name":"Wei Chen","email":"5e030967834f35ff077462eba65c9d2032b73b2e@arm.com"},"message":"arm: crash the guest when it traps on external abort\n\nIf we spot a data or prefetch abort bearing the ESR_EL2.EA bit set, we\nknow that this is an external abort, and that should crash the guest.\n\nThis is part of XSA-201.\n\nSigned-off-by: Wei Chen <Wei.Chen@arm.com>\nReviewed-by: Stefano Stabellini <sstabellini@kernel.org>\nReviewed-by: Steve Capper <steve.capper@arm.com>\nReviewed-by: Julien Grall <Julien.Grall@arm.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/f8c6a9334b251d2e78b0873a71b4d369908fb123"},{"sha":"6aaff7b407ca76dcfc4fe81f2afe9d1594cb0d6b","author":{"name":"Wei Chen","email":"5e030967834f35ff077462eba65c9d2032b73b2e@arm.com"},"message":"arm32: handle async aborts delivered while at HYP\n\nIf guest generates an asynchronous abort and then traps into HYP\n(by HVC or IRQ) before the abort has been delivered, the hypervisor\ncould not catch it, because the PSTATE.A bit is masked all the time\nin hypervisor. So this asynchronous abort may be slipped to next\nrunning guest with PSTATE.A bit unmasked.\n\nIn order to avoid this, it is necessary to take the abort at HYP, by\nclearing the PSTATE.A bit. In this patch, we unmask the PSTATE.A bit\nto open a window to catch guest-generated asynchronous abort in all\nGuest -> HYP switch paths. If we caught such asynchronous abort in\nchecking window, the HYP data abort exception will be triggered and\nthe abort source guest will be crashed.\n\nThis is part of XSA-201.\n\nSigned-off-by: Wei Chen <Wei.Chen@arm.com>\nReviewed-by: Julien Grall <julien.grall@arm.com>\nAcked-by: Stefano Stabellini <sstabellini@kernel.org>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/6aaff7b407ca76dcfc4fe81f2afe9d1594cb0d6b"},{"sha":"d066b5b9ba8ca60b39127b3c9b1cd62a52307174","author":{"name":"Julien Grall","email":"0460a59ae5383817b5074239c81e847df6531cb1@arm.com"},"message":"libacpi: fix compilation when cross building the tools\n\nThe tools (such as mk_dsdt) can be cross-built when it may not be\ndesirable to build them on the target.\n\nThe commit c4ac1077 \"libxl/arm: Generate static ACPI DSDT table\"\nintroduced support of ARM64 in mk_dsdt but also break cross-building\ntools because the ACPI tables are not correct.\n\nWhile mk_dsdt should generate ACPI table for the target architecture, it\ncurrently generates the one for the host. This is because the source\ncode contains reference to the host architecture (__aarch64__,\n__x86_64__, __i386__) when it should be the target architecture.\n\nReplace all __aarch64__, __x86_64__, __i386__ by the corresponding\nCONFIG_*.\n\nAlso expose the CONFIG_* to the source code as the currently only\nexposed to the Makefile.\n\nReported-by: Andrii Anisov <andrii.anisov@gmail.com>\nSuggested-by: Wei Liu <wei.liu2@citrix.com>\nSigned-off-by: Julien Grall <julien.grall@arm.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nReviewed-by: Jan Beulich <jbeulich@suse.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/d066b5b9ba8ca60b39127b3c9b1cd62a52307174"},{"sha":"3a782c76036063e9b654fb54e952211ddc1e38f6","author":{"name":"Dario Faggioli","email":"236d95f5efad1b83a719674bae474fb1e14482b2@citrix.com"},"message":"credit2: make runqueues be per-socket by default\n\nBenchmarks have shown that per-socket runqueues arrangement\nbehaves better (e.g., we achieve better load balancing)\nthan the current per-core default.\n\nHere's an example (coming from\nhttps://lists.xen.org/archives/html/xen-devel/2016-06/msg02287.html ):\n\n|=======================================|\n| XEN BUILD TIME, LOW LOAD, NO NOISE    |\n|---------------------------------------|\n|       runq=core   runq=socket         |\n|         35.200       33.433           |\n|---------------------------------------|------------------------------|\n| XEN BUILD TIME, HIGH LOAD, NO NOISE   | IPERF, HIGH LOAD, NO NOISE   |\n|---------------------------------------|------------------------------|\n|       runq=core   runq=socket         |     runq=core runq=socket    |\n|         18.013       18.530           |       23.200     23.466      |\n|---------------------------------------|------------------------------|\n| XEN BUILD TIME, LOW LOAD, WITH NOISE  |\n|-------------------------------------  |\n|       runq=core   runq=socket         |\n|         45.866       39.493           |\n|---------------------------------------|------------------------------|\n| XEN BUILD TIME, HIGH LOAD, WITH NOISE | IPERF, HIGH LOAD, WITH NOISE |\n|---------------------------------------|------------------------------|\n|       runq=core   runq=socket         |     runq=core runq=socket    |\n|         36.840       29.080           |       19.967     21.000      |\n|=======================================|==============================|\n\nThe only reason why we went for per-core, initially, was to\nintroduce some form of hyperthreading support. Now we have\nhyperthreading support, independently from how runqueues\nare organized (9bb9c7388 \"xen: credit2: implement true SMT\nsupport\"), and thus we can switch to per-socket.\n\nSigned-off-by: Dario Faggioli <dario.faggioli@citrix.com>\nAcked-by: George Dunlap <george.dunlap@eu.citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/3a782c76036063e9b654fb54e952211ddc1e38f6"},{"sha":"91bdabab73712311b7231f191874aefdddf0c1a5","author":{"name":"Ian Jackson","email":"1203c8228d8d538986d539e24661885d0473fbb1@eu.citrix.com"},"message":"Update QEMU_TRADITIONAL_REVISION and QEMU_UPSTREAM_REVISION to -rc7\n\nThese commits include the fix for XSA-197.\n\nSigned-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/91bdabab73712311b7231f191874aefdddf0c1a5"},{"sha":"a9aa71a5ed8a875f79efc98f3097599a0b1f0bdb","author":{"name":"Ian Jackson","email":"1203c8228d8d538986d539e24661885d0473fbb1@eu.citrix.com"},"message":"Merge branch 'staging' of xenbits.xen.org:/home/xen/git/xen into staging","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/a9aa71a5ed8a875f79efc98f3097599a0b1f0bdb"},{"sha":"a7a578ce6b8634eec30cb8445ea98e18d9b4e9b8","author":{"name":"Ian Jackson","email":"1203c8228d8d538986d539e24661885d0473fbb1@eu.citrix.com"},"message":"Config.mk: Drop stale QEMU_TRADITIONAL_REVISION commentary\n\nSigned-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/a7a578ce6b8634eec30cb8445ea98e18d9b4e9b8"}]}
{"actor":{"display_login":"avsm"}}