KVM: nVMX: Check GUEST_DR7 on vmentry of nested guests
authorKrish Sadhukhan <krish.sadhukhan@oracle.com>
Thu, 16 Jan 2020 00:54:32 +0000 (19:54 -0500)
committerPaolo Bonzini <pbonzini@redhat.com>
Mon, 27 Jan 2020 18:59:55 +0000 (19:59 +0100)
commitb91991bf6b707482953c094dbd9615f6382ba2cb
treea27309345c916f18b7452f5224bc0715ceaf05c7
parente174bb94831e792a50877754c78c1f340543bb64
KVM: nVMX: Check GUEST_DR7 on vmentry of nested guests

According to section "Checks on Guest Control Registers, Debug Registers, and
and MSRs" in Intel SDM vol 3C, the following checks are performed on vmentry
of nested guests:

    If the "load debug controls" VM-entry control is 1, bits 63:32 in the DR7
    field must be 0.

In KVM, GUEST_DR7 is set prior to the vmcs02 VM-entry by kvm_set_dr() and the
latter synthesizes a #GP if any bit in the high dword in the former is set.
Hence this field needs to be checked in software.

Signed-off-by: Krish Sadhukhan <krish.sadhukhan@oracle.com>
Reviewed-by: Karl Heubaum <karl.heubaum@oracle.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/vmx/nested.c
arch/x86/kvm/x86.c
arch/x86/kvm/x86.h