KVM: nVMX: Don't emulate instructions in guest mode

bonzini · bonzini · commit 07721feee46b · 2020-02-23T10:11:55.000+01:00
vmx_check_intercept is not yet fully implemented. To avoid emulating
instructions disallowed by the L1 hypervisor, refuse to emulate
instructions by default.

Cc: stable@vger.kernel.org
[Made commit, added commit msg - Oliver]
Signed-off-by: Oliver Upton &lt;oupton@google.com&gt;
Signed-off-by: Paolo Bonzini &lt;pbonzini@redhat.com&gt;
diff --git a/arch/x86/kvm/vmx/vmx.c b/arch/x86/kvm/vmx/vmx.c
@@ -7164,7 +7164,7 @@ static int vmx_check_intercept(struct kvm_vcpu *vcpu,
 	}
 
 	/* TODO: check more intercepts... */
-	return X86EMUL_CONTINUE;
+	return X86EMUL_UNHANDLEABLE;
 }
 
 #ifdef CONFIG_X86_64

Original file line number	Diff line number	Diff line change
`@@ -7164,7 +7164,7 @@ static int vmx_check_intercept(struct kvm_vcpu *vcpu,`
`7164`	`7164`	`}`
`7165`	`7165`
`7166`	`7166`	`/* TODO: check more intercepts... */`
`7167`		`- return X86EMUL_CONTINUE;`
	`7167`	`+ return X86EMUL_UNHANDLEABLE;`
`7168`	`7168`	`}`
`7169`	`7169`
`7170`	`7170`	`#ifdef CONFIG_X86_64`