tree 75932ced011a5659ab23adcef8a5689a8c1f40f0
parent 68fb78d7d5723066ec2cacee7d25d67a4143b42f
author Paolo Bonzini <pbonzini@redhat.com> 1703263658 +0100
committer Paolo Bonzini <pbonzini@redhat.com> 1709076219 +0100

target/i386: check validity of VMCB addresses

MSR_VM_HSAVE_PA bits 0-11 are reserved, as are the bits above the
maximum physical address width of the processor.  Setting them to
1 causes a #GP (see "15.30.4 VM_HSAVE_PA MSR" in the AMD manual).

The same is true of VMCB addresses passed to VMRUN/VMLOAD/VMSAVE,
even though the manual is not clear on that.

Cc: qemu-stable@nongnu.org
Fixes: 4a1e9d4d11c ("target/i386: Use atomic operations for pte updates", 2022-10-18)
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>