From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazon11023112.outbound.protection.outlook.com [52.101.83.112]) by lore.virtuozzo.com (Postfix) with ESMTPS id 9502F8045D for ; Mon, 26 Oct 2026 11:50:13 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tvNOWgSBQWmPs6qnrl+WQkcZYO33wS6pDNee44qmz4G7CJQPEwN9EwzPwQCiD8KC0YaOqCO9z2pML8DhJoThs2HSBgBeJWni+ggIi62oh9fAx5VbqCINoDa5ap2NfGPPRCiAkaJJoUfPWGJdGFzvRlO+Nuxj2jQ+3BIK7LMurVN9D+s4NQ+qtArbJThp2m4kWQYkdJQq5gdLwPMn86IlT6lwAAmc5aA3PzpRpAV++Aj7sJSpxzV+xNhNJ4R8eoHC2t7xhwaHm0eVl0DAaJXt2BELyH70Ejrlh71yyjWyzvCvgK1LKd4EPBPMDybIwYYv3DK/BtcsBMnTLYbMbCC8fg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gEdPyRGCIU1DRcIgmrrcLZ21WT+GzjveEaYMl4thnXY=; b=nhNrHjxA1sW3elsIVa1rrLjsXA3zFVMRZ8pAKW/4DdysqK3mwLUg5e0fWvw69AvtLlXbyNwZ/s9AIOgP4cxOMVelv3sNEEwCxhTgRxXS/8bumnrtaVJyGxp4fG1vaY3bPD89XavsfYoMpRB/oPS5bjNKC7+AzVHjJvCu4hhtok714LB9tZhupxLEJEMoEIfSF5NQRhPS1TsYcTa6ijBO1tf7nk/oDgJgv5ho/RuU+wDNIIaWxmFGpRpe1srURmdiZBU4hIvJO4lCtT4DkRs/Q3mfYriYq73lWUECxSfImk2tEnzfiuI+6HeIOQ4Lhdevlb9O9JD2+9ctim048X1ZSQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 69.169.224.2) smtp.rcpttodomain=virtuozzo.com smtp.mailfrom=eu-central-1.amazonses.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=sashiko.virtuozzo.com; dkim=pass (signature was verified) header.d=sashiko.virtuozzo.com; dkim=pass (signature was verified) header.d=amazonses.com; arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtuozzo.onmicrosoft.com; s=selector2-virtuozzo-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gEdPyRGCIU1DRcIgmrrcLZ21WT+GzjveEaYMl4thnXY=; b=CmkoxH6hF0Vfbafa7L0qp9jWAxJT95nSBODGgd1EV3JgYnpUBcNjvMVEPI/MffQHXR50ei238JOFB1tt7w8a/hZt5t/LTwcrvK7S7nhJGvHSbMiDISpH9TWRDfQx/Xl1aiawp3G6PI1ZpcYk3tjYme/BaEFCKGTaGWpU42pY32o= Received: from FR4P281CA0238.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:e9::17) by PAWPR08MB9661.eurprd08.prod.outlook.com (2603:10a6:102:2ec::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.22; Mon, 26 Oct 2026 11:50:09 +0000 Received: from MI3PEPF00008492.eurprd03.prod.outlook.com (2603:10a6:d10:e9:cafe::4f) by FR4P281CA0238.outlook.office365.com (2603:10a6:d10:e9::17) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.569.7 via Frontend Transport; Mon, 26 Oct 2026 11:50:09 +0000 Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 69.169.224.2) smtp.mailfrom=eu-central-1.amazonses.com; dkim=pass (signature was verified) header.d=sashiko.virtuozzo.com;dkim=pass (signature was verified) header.d=amazonses.com;dmarc=pass action=none header.from=sashiko.virtuozzo.com; Received-SPF: Pass (protection.outlook.com: domain of eu-central-1.amazonses.com designates 69.169.224.2 as permitted sender) receiver=protection.outlook.com; client-ip=69.169.224.2; helo=b224-2.smtp-out.eu-central-1.amazonses.com; pr=C Received: from b224-2.smtp-out.eu-central-1.amazonses.com (69.169.224.2) by MI3PEPF00008492.mail.protection.outlook.com (10.167.240.153) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Mon, 26 Oct 2026 11:50:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=23yjbh4k34hwzfubhuiim7m4inbd3ick; d=sashiko.virtuozzo.com; t=1793015408; h=Message-ID:From:Subject:To:Cc:In-Reply-To:References:Content-Type:Content-Transfer-Encoding:Date; bh=gEdPyRGCIU1DRcIgmrrcLZ21WT+GzjveEaYMl4thnXY=; b=ReQmX2sXn3OvQkMZdEXB/IQRQCsbbeWUup8I3Md+PkHgx5o5K4Tnf/56CZ6YPTCY MJwKUiZPrr3iXh3SHkKSZLwtXMrNAptVTwESzW23SUJ5ZU5ZxNALH6JJbq2rsHwcfey a0j1XLvCd4Sqhas5GaQ5k8jdI/3PsoAvWvmrxGyxelvHOemZmLuaiGKbrfuwRles5AV F0ipdIrd6P6aXGhTAQPCYGf8GCOeBHgHCa5aJrdnoLRmptlS77/ZQa/Y0PD0LTmLeRw iYzIDX8ednZ9wloYxqfGEqBK7NTpUCNT4JMfiuuczgGvnpsYLiDAYcdozTJEcO61Nf+ +aW1Js4QQw== DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=qftdzk2dqsatjnlrq4r5brjbihpfcrsh; d=amazonses.com; t=1793015408; h=Message-ID:From:Subject:To:Cc:In-Reply-To:References:Content-Type:Content-Transfer-Encoding:Date:Feedback-ID; bh=gEdPyRGCIU1DRcIgmrrcLZ21WT+GzjveEaYMl4thnXY=; b=Vknmbth9gTQUDmZJbiWpIV3S+P7ixnTfm1REkqDn1BGvozHj0WgTskjDNmC7aEhv 3Vq+DqpsGZQSEje0fTPMy/Tn5Be8dJTYC34Vio8+MvOfccv6nMiAafklv0FV9GC30fl LQ/2hCXuF0lDq1nfJ/0Z8YPZM6GDth2w2wxz08N0= Message-ID: <010701a1780be6f6-575846a9-3612-4483-87a3-d7cda7d337dd-000000@eu-central-1.amazonses.com> From: no-reply@sashiko.virtuozzo.com Subject: Re: [PATCH hci-8.1 2/3] hw/usb/hcd-xhci: Limit DMA transfers to plain memory #VSTOR-151666 To: "Denis V. Lunev" , andrey.drobyshev@virtuozzo.com Cc: svt-core@virtuozzo.com, den@openvz.org In-Reply-To: <20261026114645.187003-3-den@openvz.org> References: <20261026114645.187003-1-den@openvz.org> <20261026114645.187003-3-den@openvz.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Date: Mon, 26 Oct 2026 11:50:08 +0000 Feedback-ID: ::1.eu-central-1.2wRQJBpg9g1fGRYexx3dUuYGS25Bux+2TEOx72/m6U4=:AmazonSES X-SES-Outgoing: 2026.10.26-69.169.224.2 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 0bc7f26d-0264-416e-a6fc-8352af79c58f:0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MI3PEPF00008492:EE_|PAWPR08MB9661:EE_ MIME-Version: 1.0 X-MS-Office365-Filtering-Correlation-Id: 28bbb8f0-6091-4306-a397-08df335748ff X-LD-Processed: 0bc7f26d-0264-416e-a6fc-8352af79c58f,ExtAddr X-MS-Exchange-AtpMessageProperties: SA List-Id: svt-core@virtuozzo.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|48200799018|9140799003|376014|61400799027|32142699015|261009223027099003|261021121427099003|261022105027099003|10067099003|5063699009|56012099006|3023799007|4113699003|5113699003|18002099003|16102099003|22082099003|55112099003|13003099007|4143699003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:69.169.224.2;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:b224-2.smtp-out.eu-central-1.amazonses.com;PTR:b224-2.smtp-out.eu-central-1.amazonses.com;CAT:NONE;SFS:(13230040)(48200799018)(9140799003)(376014)(61400799027)(32142699015)(261009223027099003)(261021121427099003)(261022105027099003)(10067099003)(5063699009)(56012099006)(3023799007)(4113699003)(5113699003)(18002099003)(16102099003)(22082099003)(55112099003)(13003099007)(4143699003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: l5xGL5pVDTqIFuC53rMIh5cGm1+Ia1EB8Uq8Xv76TXiNu2mr70yynqHSRq/mU45sBCL+HrUrD398+q9Y2p01Wmp3nSLMeQiKUxV5/04vxo3GBZLgaV/z0NjfSpXVm9L3b8U2SvQ3ktwYPf/iAEEAhiHlUjT5xn0Q7vVLQxg925mmd74B6r/oApwAXMj8j/wlGiz1wNZGCVlXObRSAJQIJhpC4nYVWPsv1Bbj9cwfR1N7uhnMavlMKOLl7s3uL6DrFdyFlqFG5V+NHHeDfoEi9uFK+ipAo3MgXl8S5VdRbxvZZ00AVuPPBu2Mgukeo8SfpwhIkDke3NlMJxtl9L08y7e5D0xfuCOlQzJTUwZOZ6RUTGwAfFPO6SgtIAL01nqljC0wd3f3sw6/sb7Jm0AgrkEXFdu1xB/NJy/37YlJ8jjzZJqEruY3joYnMkJHSkqr X-ExternalRecipientOutboundConnectors: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-Auto-Response-Suppress: DR, OOF, AutoReply X-OriginatorOrg: virtuozzo.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Oct 2026 11:50:08.9038 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 28bbb8f0-6091-4306-a397-08df335748ff X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-MS-Exchange-CrossTenant-AuthSource: MI3PEPF00008492.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR08MB9661 > From: Thomas Huth >=20 > XHCI is a complex controller, involving lots of descriptors that > are written and read via DMA transfers. As some recent bugs like > https://gitlab.com/qemu-project/qemu/-/work_items/3926 revealed, > this can sometimes be exploited from the guest side to crash or > stall QEMU. >=20 > The code currently does DMA writes with the MEMTXATTRS_UNSPECIFIED > attribute, i.e. the controller is allowed to write to other MMIO > regions, too. However, in normal operation, this should not be > necessary, all descriptors should reside in normal memory. So let's > decrease the attack surface a little bit and limit the DMA writes > to normal memory here. >=20 > Signed-off-by: Thomas Huth Sashiko has reviewed this patch and found no issues. It looks great! --=20 Sashiko AI review =C2=B7 https://sashiko.vzint.dev/#/patchset/2026102611464= 5.187003-1-den@openvz.org?part=3D2