[v8,0/6] AMD/IOMMU: further work split from XSA-378

Message ID	d249a759-188a-d689-316a-4743922827e5@suse.com (mailing list archive)
Headers	show Return-Path: <SRS0=cgBe=OM=lists.xenproject.org=xen-devel-bounces@kernel.org> DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org EB99A60FE6 Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" <xen-devel-bounces@lists.xenproject.org> From: Jan Beulich <jbeulich@suse.com> Subject: [PATCH v8 0/6] AMD/IOMMU: further work split from XSA-378 To: "xen-devel@lists.xenproject.org" <xen-devel@lists.xenproject.org> Cc: Andrew Cooper <andrew.cooper3@citrix.com>, Paul Durrant <paul@xen.org> Message-ID: <d249a759-188a-d689-316a-4743922827e5@suse.com> Date: Wed, 22 Sep 2021 16:35:33 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit MIME-Version: 1.0
Series	AMD/IOMMU: further work split from XSA-378 \| expand [v8,0/6] AMD/IOMMU: further work split from XSA-378 [v8,1/6] AMD/IOMMU: obtain IVHD type to use earlier [v8,2/6] AMD/IOMMU: improve (extended) feature detection [v8,3/6] AMD/IOMMU: check IVMD ranges against host implementation limits [v8,4/6] AMD/IOMMU: respect AtsDisabled device flag [v8,5/6] AMD/IOMMU: pull ATS disabling earlier [v8,6/6] AMD/IOMMU: expose errors and warnings unconditionally

Message ID

d249a759-188a-d689-316a-4743922827e5@suse.com (mailing list archive)

Headers

DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org EB99A60FE6
Errors-To: xen-devel-bounces@lists.xenproject.org
Precedence: list
Sender: "Xen-devel" <xen-devel-bounces@lists.xenproject.org>
From: Jan Beulich <jbeulich@suse.com>
Subject: [PATCH v8 0/6] AMD/IOMMU: further work split from XSA-378
To: "xen-devel@lists.xenproject.org" <xen-devel@lists.xenproject.org>
Cc: Andrew Cooper <andrew.cooper3@citrix.com>, Paul Durrant <paul@xen.org>
Message-ID: <d249a759-188a-d689-316a-4743922827e5@suse.com>
Date: Wed, 22 Sep 2021 16:35:33 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.14.0
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?q?4gC3JOp+8PvfKGkHdj1QXsS9VUie?=
	=?utf-8?q?uevr2jOAvQSDVwjkLafFvL9sXPqa8v6DG2o7iSbVgNQoMHPLd/nKPMuQkv/WxL8YW?=
	=?utf-8?q?Ez4kdc+9fFKE9AUShA2T6D7D9sERRb7EsivbjbwudoYky7aNFVJ0JaaL+WEOYMorT?=
	=?utf-8?q?DdycDETDShCrQ9791fj3W+shBjHfShM2XhUaeTIYTQB5BiYvUc/ZyIi0hbJeCy1B+?=
	=?utf-8?q?ro3JQtJTDAZaRM8tCFaWs3RJVWVFVyLpKI7bPw+4isiHtbXSJ+sD9pcwniorqm8p5?=
	=?utf-8?q?f2UyF6YPVVG/aEqyP/fbniqKXf7pSCBM6C1yAwsIR92NzONmWG8ezGKGEP/18jWeo?=
	=?utf-8?q?DIXI5ZElz8PoSZAe76KyBfZ1EebcySgVYdKCHyY/Ts11sERQTz9ZeHj1opoeEJUtH?=
	=?utf-8?q?62dGDbE/V1jeYIuAnQOVNo+CQAdi3tj/JhFQwjl+wnwPxfvLluS6u2jghFyljfHFD?=
	=?utf-8?q?FGVoBcr4TMvBlnvUjutA6gQiM3rhG2edtoX3XUa9/9JDLK2ku0ikl8OA9u+rOBfFl?=
	=?utf-8?q?0afFVtQATrWV4md+Ii3zpMuPGTKgEHZWPABn2tS7Loq+AEaHClyIWJoZtykji4p67?=
	=?utf-8?q?dsOeyvFvStih2RGoXq+0Vu3cy2qYl4K7XjLl1WzHGFg47xwscYlsl89OVoS4/c6QN?=
	=?utf-8?q?yMqf1aQwzmEuYuX78IE2VlegikPi4+XF6xltgxOuE6QQywklbprCt9R0KkRUKZXXL?=
	=?utf-8?q?F7fpvSd3nxJSNGoRAMOj94/O+vWXqcjFKqmoBvL60CxIbTBjG5eVJHCBTJoTnQWmZ?=
	=?utf-8?q?jsXlvNxBSP/SVDO86BUTentHANJZYJcNackFSfTMUyJCl9A0gpAdCi8rrZKS/wJX1?=
	=?utf-8?q?5qP8zQFVN6D2XXpjeZPDK+lVotAVRpNllcOE9jR7BlI2IWznxz+QWNemKmvN4k5PE?=
	=?utf-8?q?vQjgJf5cwQXhnjKOH1Z0UBXLnwpc20YypLgYgAo1t1j2bGf9PaywQ97oHxmNsdGNj?=
	=?utf-8?q?G5e7dLqCN8Gi02NGqKEOTaf6EMxwy0VpjVGN6geC6SHvMaa606PfJkhHwv/Firpjw?=
	=?utf-8?q?s7kwhpCDiHfL9lGnY6QdUQ68wYpyz9Ap7+R5qdOlTbwwhg4DjsSxcD5FLkBnMi0Js?=
	=?utf-8?q?5i7EGpjPqJomOI92sI+bRz/KYUJ9U5AyqKuBIqsBaDu93bzG0DsOJua6rWzqWtZ2A?=
	=?utf-8?q?3mmY/VGVUzhbHhR/5W7rglS6c40NqG3mZwjs/lh8+mhTbAsHpncvcBauz/BTxgn+t?=
	=?utf-8?q?aSkLfHF7jiStcAMG9o0bNwjGEoR5b8z7A4yEmld2xlQTKcvV5n69nFWk28k3kCeLa?=
	=?utf-8?q?IbHffgFHYmgErlW+?=
X-OriginatorOrg: suse.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 5ac2364a-d34f-4556-8d04-08d97dd63c6c
X-MS-Exchange-CrossTenant-AuthSource: VI1PR04MB5600.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2021 14:35:34.0525
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: f7a17af6-1c5c-4a36-aa8b-f5be247aa4ba
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 6FUthgMTT64/fIViH7IG2Oybv/qoj+a1Yz11f11QY1gG4XBnu2XOq40aSU7zSOPWAs2D0osUUesg3D1M8FHflQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0401MB2445

Series

AMD/IOMMU: further work split from XSA-378 | expand

Message

Jan Beulich Sept. 22, 2021, 2:35 p.m. UTC

Along the pieces that were determined to have security relevance
there are quite a few more fixes / improvements (or so I hope)
which were decided to not become part of the XSA itself.

1: obtain IVHD type to use earlier
2: improve (extended) feature detection
3: check IVMD ranges against host implementation limits
4: respect AtsDisabled device flag
5: pull ATS disabling earlier
6: expose errors and warnings unconditionally

Jan