KVM: x86: emulator: em_sysexit should update ctxt->mode
commit 5015bb89b5 upstream.
SYSEXIT is one of the instructions that can change the
processor mode, thus ctxt->mode should be updated after it.
Note that this is likely a benign bug, because the only problematic
mode change is from 32 bit to 64 bit which can lead to truncation of RIP,
and it is not possible to do with sysexit,
since sysexit running in 32 bit mode will be limited to 32 bit version.
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Message-Id: <20221025124741.228045-11-mlevitsk@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
e0c7410378
commit
c8a2fd7a71
@@ -2957,6 +2957,7 @@ static int em_sysexit(struct x86_emulate_ctxt *ctxt)
|
|||||||
ops->set_segment(ctxt, ss_sel, &ss, 0, VCPU_SREG_SS);
|
ops->set_segment(ctxt, ss_sel, &ss, 0, VCPU_SREG_SS);
|
||||||
|
|
||||||
ctxt->_eip = rdx;
|
ctxt->_eip = rdx;
|
||||||
|
ctxt->mode = usermode;
|
||||||
*reg_write(ctxt, VCPU_REGS_RSP) = rcx;
|
*reg_write(ctxt, VCPU_REGS_RSP) = rcx;
|
||||||
|
|
||||||
return X86EMUL_CONTINUE;
|
return X86EMUL_CONTINUE;
|
||||||
|
|||||||
Reference in New Issue
Block a user