[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [RFC 2/2] pc: fix QEMU crashing when more than ~50 memo
From: |
Paolo Bonzini |
Subject: |
Re: [Qemu-devel] [RFC 2/2] pc: fix QEMU crashing when more than ~50 memory hotplugged |
Date: |
Wed, 03 Jun 2015 18:11:29 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 |
On 03/06/2015 17:23, Igor Mammedov wrote:
>> > Understood now. This still should be a separate patch. I'm much more
>> > confident with the other two (e.g. what happens if a malicious guest
>> > writes to memory that is still MAP_NORESERVE),
> it should get SIGSEVG due to access to PROT_NONE.
QEMU doesn't get the SEGV if you do address_space_rw or
address_space_map to unallocated space, because the empty area in the
container is treated as MMIO.
But what does vhost do if you tell it to treat the whole block as a
single huge lump?
Paolo
>> > so feel free to post
>> > those without RFC tag. But the vhost one really needs mst's eyes.
> ok, I'll split it out.
>
Re: [Qemu-devel] [RFC 0/2] Fix QEMU crash during memory hotplug with vhost=on, Michael S. Tsirkin, 2015/06/03