Re: [Qemu-stable] [PATCH v4 9/9] intel-iommu: rework the page walk logic

[Peter Xu]

On Wed, May 23, 2018 at 05:33:34PM +0300, Michael S. Tsirkin wrote:
> On Fri, May 18, 2018 at 03:25:17PM +0800, Peter Xu wrote:
> > SECURITY IMPLICATION: this patch will fix a potential small window that
> > the DMA page table might be incomplete or invalid when the guest sends
> > domain/context invalidations to a device.  It can cause random DMA
> > errors for assigned devices.
> 
> So this is more a correctness IMO. I don't see how can
> e.g. an application within guest cause any mischief
> with this, it will just get a non working device.

Yes, you are right.  It causes valid mappings missing so there's no
risk to anyone but only unfunction.  I should remove the "SECURITY
IMPLICATION" wordings.

Thanks,

-- 
Peter Xu