gvisor/pkg/sentry
Adin Scannell d269845159 Ensure guest-mode for page table modifications.
Because of the KVM shadow page table implementation, modifications made
to guest page tables from host mode may not be syncronized correctly,
resulting in undefined behavior. This is a KVM bug: page table pages
should also be tracked for host modifications and resynced appropriately
(e.g. the guest could "DMA" into a page table page in theory).

However, since we can't rely on this being fixed everywhere, workaround
the issue by forcing page table modifications to be in guest mode. This
will generally be the case anyways, but now if an exit occurs during
modifications, we will re-enter and perform the modifications again.

PiperOrigin-RevId: 199587895
Change-Id: I83c20b4cf2a9f9fa56f59f34939601dd34538fb0
2018-06-06 23:26:14 -07:00
..
arch
context Implement sysv shm. 2018-05-17 15:06:19 -07:00
control Added a function to the controller to checkpoint a container. 2018-06-06 11:43:55 -07:00
device
fs Add support for rpcinet owned procfs files. 2018-06-05 15:45:35 -07:00
hostcpu
inet
kernel Fix capability check for sysv semaphores. 2018-05-17 15:38:11 -07:00
limits
loader
memmap
memutil
mm Implement sysv shm. 2018-05-17 15:06:19 -07:00
platform Ensure guest-mode for page table modifications. 2018-06-06 23:26:14 -07:00
safemem
sighandling
socket Add support for rpcinet ioctl(2). 2018-06-06 15:53:26 -07:00
state
strace
syscalls Remove offset check to match with Linux implementation. 2018-05-22 16:36:40 -07:00
time
uniqueid
usage
usermem
watchdog
BUILD