tree f35f5e852cb09aea39105ff567448437fa99293d
parent 772b81bb2f9b191a046ba7bba1f232eb7b109b84
author Maxim Levitsky <mlevitsk@redhat.com> 1598545640 +0300
committer Paolo Bonzini <pbonzini@redhat.com> 1599927703 -0400

KVM: nSVM: more strict SMM checks when returning to nested guest

* check that guest is 64 bit guest, otherwise the SVM related fields
  in the smm state area are not defined

* If the SMM area indicates that SMM interrupted a running guest,
  check that EFER.SVME which is also saved in this area is set, otherwise
  the guest might have tampered with SMM save area, and so indicate
  emulation failure which should triple fault the guest.

* Check that that guest CPUID supports SVM (due to the same issue as above)

Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Message-Id: <20200827162720.278690-4-mlevitsk@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>