{"push_id":1385596187,"size":11,"distinct_size":0,"ref":"refs/heads/master","head":"4ccb2adb96042e0d1e334c01fe260b32e6001db9","before":"496673a2ada93c201fbe1cc83146c8bd8e79169d","commits":[{"sha":"e1d1c68ea8a3354ba7474f15303d0a9086ba3287","author":{"name":"Wei Liu","email":"fa4f319e660138b996995f45a8e22bf1fdae6f2a@citrix.com"},"message":"xen: disable debug build\n\nXen debug build is controlled by Kconfig.\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nReviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/e1d1c68ea8a3354ba7474f15303d0a9086ba3287"},{"sha":"31d41d7bc87d0d2a24ac965b37793faa40d23dcb","author":{"name":"Wei Liu","email":"fa4f319e660138b996995f45a8e22bf1fdae6f2a@citrix.com"},"message":"build: make debug option affect tools only\n\nThe debug option in Config.mk affects hypervisor, tools and stubdom by\nappending different flags to CFLAGS.  Mini-os under extra is not\naffected because it already has its own build system when it is\nseparated from xen.git.\n\nIt is undesirable because now hypervisor build is affected by both\nKconfig and debug.\n\nDisentangle the semantics of debug by pushing relevant options to\nindividual sub-systems.\n\nFor hypervisor, the flags previously added by debug option is now\ncontrolled by CONFIG_DEBUG.\n\nFor tools, flags are moved from config/*.mk into tools/Rules.mk.\n\nFor stubdom, because it unilaterally sets debug=y before including\ntop-level Config.mk, we only need to move the debug build set of flags\ninto stubdom Makefile.\n\nSpecifically there are some considerations on what flags are picked:\n\n1. we don't need -fno-optimize-sibling-calls anymore because gcc doc\n   indicates that it is not enabled for -O1, which we already set in the\n   debug build.\n2. for tools we use -O0 -g3 in Rules.mk because they already take\n   precedence over the flags set in config/*.mk.\n3. for hypervisor we don't add -fno-omit-frame-pointer to debug build\n   because that's controlled by CONFIG_FRAME_POINTER.\n\nThis patch doesn't intend to tune those flags, but to provide identical\nset of effective flags as before.  The debug option in Config.mk will\nonly affect tools components after this patch is applied.\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>\nAcked-by: Jan Beulich <jbeulich@suse.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/31d41d7bc87d0d2a24ac965b37793faa40d23dcb"},{"sha":"fecf584294c6b00d95de0ecdb5e02269d8d9b4c9","author":{"name":"Wei Liu","email":"fa4f319e660138b996995f45a8e22bf1fdae6f2a@citrix.com"},"message":"Config.mk: fix comment for debug option\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nReviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/fecf584294c6b00d95de0ecdb5e02269d8d9b4c9"},{"sha":"3c79495579adddee535c2b7f8c332e4517764a0e","author":{"name":"Dario Faggioli","email":"236d95f5efad1b83a719674bae474fb1e14482b2@citrix.com"},"message":"features: declare the Credit2 scheduler as Supported\n\nCredit2 is available in tree as an \"Experimental\" scheduler since\na few years. Recently, effort started for making it production ready\nand, eventually, the new Xen's default scheduler. As a consequence of\nthat, it has undergone a great deal of development, testing and\nbenchmarking.\n\nIn fact, Credit2's much more modern (wrt Credit1) design and cleaner\ncode makes it a lot easier to understand what the scheduler is doing,\nfix scheduling issues that may come up, and implement new and more\nadvanced features, in future.\n\nIn some more details:\n\n - key features that were missing (pinning and context switching\n   rate-limiting) have now been implemented, and more (soft affinity,\n   caps and reservations) are about to come. The gap wrt Credit1 is\n   therefore closing. In particular, with pinning and rate-limiting\n   available, the scheduler can be considered usable.\n\n - Credit2 is tested by OSSTest since long time. Furthermore, as a\n   part of recent efforts, stress tests and benchmarks have been run\n   and shown no bugs or stability issues.\n\n - A number of different benchmarks have been run, most of them\n   comparing Credit2 with Credit1. Some of the results were posted on\n   xen-devel, some others have been illustrated during a talk at 2016\n   edition of Xen-Project Developer Summit. In general, performance\n   look promising --if not better than Credit1 already, in some of\n   the cases.\n\nIt therefore appears that we are ready to mark the Credit2 scheduler\nas a 'Supported' feature, and ask users to look at it and try it, if\nthey think it suits their needs.\n\nOf course, declaring something 'Supported' has security implications.\nSo here it is how the situation looks like from a security standpoint:\n\n1) Is guest->host privilege escalation possible?\n\nThe only interfaces exposed to unprivileged guests are the SCHEDOP\nhypercalls, and timers. None of those hypercalls contain any pointers,\nand they don't look to contain any privilege escalation path. Also,\nthey're not specific to Credit2, as they're \"used\" by all schedulers\n(ingluding the current default, Credit1), so anything about these\ninterfaces would be a security concern already.\n\n2) Is guest user->guest kernel escalation possible?\n\nThe guest kernel is not really relying on anything from the scheduler\nto protect itself or any data in any way.\n\n3) Is there any information leakage?\n\nThe only information which the scheduler exposes to unprivileged\nguests is the timing information.  This may be able to be used for\nside-channel attacks to probabilistically infer things about other\nvcpus running on the same system; but this has not traditionally\nbeen considered within the security boundary. And, again, this is\npossible with all schedulers.\n\nThe control domain can issue DOMCTL_SCHEDOP and SYSCTL_SCHEDOP\nhypercalls, but the involved data structures are handled in a\nway that does not leak information (which would be leaked \"only\"\nto Dom0 anyway).\n\n4) Can a Denial-of-Service be triggered?\n\nThis is a risk, with schedulers, and one that's hard to foresee.\nFor instance, it _did_ happen on Credit1, in the past (a vcpu\ncould \"game the system\" by sleeping at particular times to gain\nBOOST priority and monopolize 95% of the cpu). In that case, it\nwas possible because of the probabilistic nature of accounting\nin Credit1 (which was then fixed). Well, Credit2:\n - already do accurate, rather than probabilistic, accounting;\n - does not have any BOOST or, in general, any way for a vcpu to\n   become 'more important' than the others: they're all subjected\n   to the same crediting algorithm.\n\nAlso note that, the accounting and the crediting algorithm are a lot\nsimpler than in Credit1, and hence a lot easier to understand, debug\nand audit.\n\nSigned-off-by: Dario Faggioli <dario.faggioli@citrix.com>\nAcked-by: Jan Beulich <jbeulich@suse.com>\nAcked-by: Wei Liu <wei.liu2@citrix.com>\nAcked-by: George Dunlap <george.dunlap@citrix.com>\nAcked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>\nAcked-by: Ian Jackson <ian.jackson@eu.citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/3c79495579adddee535c2b7f8c332e4517764a0e"},{"sha":"ff53c65311a32e54dba51f2b8112632e9dd2af3b","author":{"name":"Wei Liu","email":"fa4f319e660138b996995f45a8e22bf1fdae6f2a@citrix.com"},"message":"libxl: disallow enabling PoD and ALTP2M at the same time\n\nThat combination would cause Xen to crash.\n\nNote that although this is a security issue, is not XSA-worthy because\nALTP2M is experimental.\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>\nAcked-by: Ian Jackson <ian.jackson@eu.citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/ff53c65311a32e54dba51f2b8112632e9dd2af3b"},{"sha":"12bc22f79117dfae5e59382cdda6b8b6b70a7554","author":{"name":"Andrew Cooper","email":"ce6e7acce1f5d55db389f61db68b4ce33f3ea3e3@citrix.com"},"message":"x86/emul: Reject LGDT/LIDT attempts with non-canonical base addresses\n\nNo sane OS would deliberately try this, but make Xen's emulation match real\nhardware by delivering #GP(0), rather than suffering a VMEntry failure.\n\nSigned-off-by: Andrew Cooper <andrew.cooper3@citrix.com>\nReviewed-by: Jan Beulich <JBeulich@suse.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/12bc22f79117dfae5e59382cdda6b8b6b70a7554"},{"sha":"33b79dd04445b3ce289aa821eed8d812157478d6","author":{"name":"Roger Pau Monne","email":"5f4729e48ff357e9d43c7533050665e737ae6983@citrix.com"},"message":"docs: fixup PVHv2 documentation regarding AP startup\n\nOn PVHv2 guests the local APIC can also be used to start APs if present.\nAmend the documentation in order to reflect this.\n\nSigned-off-by: Roger Pau Monné <roger.pau@citrix.com>\nAcked-by: Jan Beulich <jbeulich@suse.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/33b79dd04445b3ce289aa821eed8d812157478d6"},{"sha":"6723676c2651a40855e37861315569892fa2b923","author":{"name":"Roger Pau Monne","email":"5f4729e48ff357e9d43c7533050665e737ae6983@citrix.com"},"message":"docs: document ACPI usage in PVHv2 guests\n\nIt is possible for PVHv2 guests to get the hardware description from ACPI\ntables, add this to the documentation also.\n\nSigned-off-by: Roger Pau Monné <roger.pau@citrix.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/6723676c2651a40855e37861315569892fa2b923"},{"sha":"7922a28a951cbda8b58b354b889574c6ea7b2524","author":{"name":"Julien Grall","email":"0460a59ae5383817b5074239c81e847df6531cb1@arm.com"},"message":"xen/arm: early-printk: It should depends on CONFIG_DEBUG and not debug\n\nThe variable debug is used to enable debug for the tools. As\nearly-printk is for the hypervisor we should use CONFIG_DEBUG.\n\nSigned-off-by: Julien Grall <julien.grall@arm.com>\nAcked-by: Wei Liu <wei.liu2@citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/7922a28a951cbda8b58b354b889574c6ea7b2524"},{"sha":"bd41a22f2d7ac66ff71bacff391ee21f658a8fa2","author":{"name":"Wei Liu","email":"fa4f319e660138b996995f45a8e22bf1fdae6f2a@citrix.com"},"message":"Revert \"libxl: disallow enabling PoD and ALTP2M at the same time\"\n\nThis reverts commit ff53c65311a32e54dba51f2b8112632e9dd2af3b.\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/bd41a22f2d7ac66ff71bacff391ee21f658a8fa2"},{"sha":"4ccb2adb96042e0d1e334c01fe260b32e6001db9","author":{"name":"Jan Beulich","email":"ae7900a0c785918fc3eaa9d1a92a76bc4e651ece@suse.com"},"message":"x86emul: {L,S}{G,I}DT ignore operand size overrides in 64-bit mode\n\nThis affects not only the layout of the data (always 2+8 bytes), but\nalso the contents (no truncation to 24 bits occurs).\n\nSigned-off-by: Jan Beulich <jbeulich@suse.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nRelease-acked-by: Wei Liu <wei.liu2@citrix.com>","distinct":false,"url":"https://api.github.com/repos/andyhhp/xen/commits/4ccb2adb96042e0d1e334c01fe260b32e6001db9"}]}
{"actor":{"display_login":"andyhhp"}}