From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 07BFAC761AF for ; Mon, 3 Apr 2023 14:42:52 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 7BA4E6B0082; Mon, 3 Apr 2023 10:42:52 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 76A64900004; Mon, 3 Apr 2023 10:42:52 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 60C80900003; Mon, 3 Apr 2023 10:42:52 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0014.hostedemail.com [216.40.44.14]) by kanga.kvack.org (Postfix) with ESMTP id 516896B0082 for ; Mon, 3 Apr 2023 10:42:52 -0400 (EDT) Received: from smtpin08.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id 2C3C8160C26 for ; Mon, 3 Apr 2023 14:42:52 +0000 (UTC) X-FDA: 80640346584.08.F09C3C9 Received: from wout2-smtp.messagingengine.com (wout2-smtp.messagingengine.com [64.147.123.25]) by imf09.hostedemail.com (Postfix) with ESMTP id ED24C140016 for ; Mon, 3 Apr 2023 14:42:49 +0000 (UTC) Authentication-Results: imf09.hostedemail.com; dkim=pass header.d=shutemov.name header.s=fm1 header.b="J YCXZo3"; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=rY95kovH; spf=pass (imf09.hostedemail.com: domain of kirill@shutemov.name designates 64.147.123.25 as permitted sender) smtp.mailfrom=kirill@shutemov.name; dmarc=none ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1680532970; a=rsa-sha256; cv=none; b=NHV4lonZoSNEmrFm2X9FaG4hjHe1zfTJHVo2na2By57QQ43f56cwjloTgM2imhYJiffhfr VmzT5f74ckNAezD8eZxg6tdWxl1x5m4MOZECYTzn0nZuIkQ1OFBeyzMvFFTRHUp+gndC+7 VvBBm8Rso5TRUFjcIpoE2TtNajAQZdE= ARC-Authentication-Results: i=1; imf09.hostedemail.com; dkim=pass header.d=shutemov.name header.s=fm1 header.b="J YCXZo3"; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=rY95kovH; spf=pass (imf09.hostedemail.com: domain of kirill@shutemov.name designates 64.147.123.25 as permitted sender) smtp.mailfrom=kirill@shutemov.name; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1680532970; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=EEoAq/2FxgiyDtHsO7Ag1VVkbIeOqrB6EH0pcFwoo5M=; b=YLi76nDXpKzXf5gVPcMkzexcikaV4HcMPgfSq9AgoSCZyVn95LbAtmv719wo/80G6JJFmM JGEQaQQDkZTpzzlmINSD93ngZqMmRlQvEf/h7IvaWtcGZ3Ql7qNyRzFg84l3+F90gqAVSl XviTj0+gCAKo1f3Fd4+4Ct8G6AR8CMs= Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.west.internal (Postfix) with ESMTP id C2FC932009F1; Mon, 3 Apr 2023 10:42:44 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Mon, 03 Apr 2023 10:42:47 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=shutemov.name; h=cc:cc:content-type:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=fm1; t=1680532964; x= 1680619364; bh=EEoAq/2FxgiyDtHsO7Ag1VVkbIeOqrB6EH0pcFwoo5M=; b=J YCXZo3CSmIfvwV0y9FWEiz1NZtUg5JNt6h/7a5w+0qC63Yf0/WpK3a7pnJj0DOGt wqXxs+/bpWTWr558YllEL8x5HClk0bFIrdAHzvhkH6b1r/LRo7wfmvWO3t+qBGS2 NpXDqkkUXxbTnT341ZZZJIndC9D7sXhawZR2hU8ll7KAuz9Yx1z0vMpWq6Xzw9ba L9GegNmYKQgYapWo3Y12eqMWmt6hPOwkSqwytqEDRH6AKB2ypf3VWo12INNssw5X 6jvlIKFTk2OLx4xJKoe2wZ/HxnHA1bAd+Y88eXCWMjXUw2Sfkb6SadxaSq0au207 VzOVOP4auymSgbUEy0+eA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; t=1680532964; x=1680619364; bh=EEoAq/2FxgiyD tHsO7Ag1VVkbIeOqrB6EH0pcFwoo5M=; b=rY95kovHZL3Mekwq39LsLeyY9Wkqj XW2GChygEII869k9qMCyII6RpWSwzBGo8Ne3JzwknnIx/C4wxDppKs3crZY1Tb7a teCF2crWlAP86exPgxMC4mrRl5P0pejcHkv8N1nEDJ9ugsdy5OCWs1b0snHEKQs2 EjorYLZ3R4Lm83KAflUZChTmsHSU0XI0YTJ+a33QQaW7M9WkZ3SGDsI4fFc71Tbd P07xaYhcF5Re5jKMjaNugKayodN3D/wGs5+a9qGYK9HXQ3pT2YBdNDxLo4/0hJkX B4vXE3ooaMtJDdFRJE3Z9LZKukNog/iJFonRgkUB2Y7YbRZjsie5AQqgw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrvdeijedgjeelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvfevuffkfhggtggujgesthdttddttddtvdenucfhrhhomhepfdfmihhr ihhllhcutedrucfuhhhuthgvmhhovhdfuceokhhirhhilhhlsehshhhuthgvmhhovhdrnh grmhgvqeenucggtffrrghtthgvrhhnpefhieeghfdtfeehtdeftdehgfehuddtvdeuheet tddtheejueekjeegueeivdektdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehkihhrihhllhesshhhuhhtvghmohhvrdhnrghmvg X-ME-Proxy: Feedback-ID: ie3994620:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 3 Apr 2023 10:42:43 -0400 (EDT) Received: by box.shutemov.name (Postfix, from userid 1000) id E586810D7B3; Mon, 3 Apr 2023 17:42:41 +0300 (+03) Date: Mon, 3 Apr 2023 17:42:41 +0300 From: "Kirill A. Shutemov" To: Vlastimil Babka Cc: "Kirill A. Shutemov" , Borislav Petkov , Andy Lutomirski , Sean Christopherson , Andrew Morton , Joerg Roedel , Ard Biesheuvel , Andi Kleen , Kuppuswamy Sathyanarayanan , David Rientjes , Tom Lendacky , Thomas Gleixner , Peter Zijlstra , Paolo Bonzini , Ingo Molnar , Dario Faggioli , Dave Hansen , Mike Rapoport , David Hildenbrand , Mel Gorman , marcelo.cerri@canonical.com, tim.gardner@canonical.com, khalid.elmously@canonical.com, philip.cox@canonical.com, aarcange@redhat.com, peterx@redhat.com, x86@kernel.org, linux-mm@kvack.org, linux-coco@lists.linux.dev, linux-efi@vger.kernel.org, linux-kernel@vger.kernel.org, Dave Hansen Subject: Re: [PATCHv9 11/14] x86/mm: Avoid load_unaligned_zeropad() stepping into unaccepted memory Message-ID: <20230403144241.f4xpsyxuy2nh2aql@box.shutemov.name> References: <20230330114956.20342-1-kirill.shutemov@linux.intel.com> <20230330114956.20342-12-kirill.shutemov@linux.intel.com> <48567ee3-b482-bafd-bd25-cbb8bf3403b2@suse.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <48567ee3-b482-bafd-bd25-cbb8bf3403b2@suse.cz> X-Rspam-User: X-Rspamd-Queue-Id: ED24C140016 X-Rspamd-Server: rspam01 X-Stat-Signature: ro1audac7jk3idueqd6piempoq5e5ogb X-HE-Tag: 1680532969-343951 X-HE-Meta: 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 RTefU22h vjIttQWFDERoMKEV5KDG6nLaDdyyl1E6ni7pJu7d1d7yZIv7o3F7WRHf43Cwm5iJzq/zabJTZbR7tUvc3TJhBM3xb6JSHHpu53t/2cWazDuMBwJEXNslamIgLSY3tOpi/1VAu8qv2Wp8FT2FSJK59SW5fo6YJalflLXcotH9MEZX7LjC4Ztp0LQHO2JON4Z8aEaqKkbJPHzUeuNtDHRcz/5rvEL+OTM0Tq/CvkultE11/e0eqh2wfukTiZVHitiep8vJrIlh3cwJWuiyL8N9esH1hnTJtY6cjOn6EcP+6uX3SzIG2enRcHXGy+bCq3tJk26+L/Bqm1z/cI2MpsFhBVGos8bWH2X8szuMV/7CIzk0KRpU= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Mon, Apr 03, 2023 at 03:28:36PM +0200, Vlastimil Babka wrote: > On 3/30/23 13:49, Kirill A. Shutemov wrote: > > load_unaligned_zeropad() can lead to unwanted loads across page boundaries. > > The unwanted loads are typically harmless. But, they might be made to > > totally unrelated or even unmapped memory. load_unaligned_zeropad() > > relies on exception fixup (#PF, #GP and now #VE) to recover from these > > unwanted loads. > > > > But, this approach does not work for unaccepted memory. For TDX, a load > > from unaccepted memory will not lead to a recoverable exception within > > the guest. The guest will exit to the VMM where the only recourse is to > > terminate the guest. > > > > There are three parts to fix this issue and comprehensively avoid access > > to unaccepted memory. Together these ensure that an extra "guard" page > > is accepted in addition to the memory that needs to be used. > > > > 1. Implicitly extend the range_contains_unaccepted_memory(start, end) > > checks up to end+2M if 'end' is aligned on a 2M boundary. It may > > require checking 2M chunk beyond end of RAM. The bitmap allocation is > > modified to accommodate this. > > 2. Implicitly extend accept_memory(start, end) to end+2M if 'end' is > > aligned on a 2M boundary. > > 3. Set PageUnaccepted() on both memory that itself needs to be accepted > > *and* memory where the next page needs to be accepted. Essentially, > > make PageUnaccepted(page) a marker for whether work needs to be done > > to make 'page' usable. That work might include accepting pages in > > addition to 'page' itself. > > > > Side note: This leads to something strange. Pages which were accepted > > at boot, marked by the firmware as accepted and will never > > _need_ to be accepted might have PageUnaccepted() set on > > them. PageUnaccepted(page) is a cue to ensure that the next > > page is accepted before 'page' can be used. > > At least the part about PageUnaccepted() is obsolete in v9, no? Ah, right. Nice catch. I removed PageUnaccepted() late in patchset preparation and forgot about this. -- Kiryl Shutsemau / Kirill A. Shutemov