Re: [PATCH 0/6] KVM: SEV: Bug fix, cleanups and enhancements

From: Paolo Bonzini
Date: Tue Nov 16 2021 - 07:35:30 EST

On 11/9/21 22:50, Sean Christopherson wrote:
Bug fix for COPY_ENC_CONTEXT_FROM that IIRC is very belated feedback (git
says its been sitting in my local repo since at least early September).

The other patches are tangentially related cleanups and enhancements for
the SEV and SEV-ES info, e.g. active flag, ASID, etc...

Booted an SEV guest, otherwise it's effectively all compile-tested only.

Sean Christopherson (6):
KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
KVM: SEV: Explicitly document that there are no TOCTOU races in copy
KVM: SEV: Set after initial checks in sev_guest_init()
KVM: SEV: WARN if SEV-ES is marked active but SEV is not
KVM: SEV: Drop a redundant setting of sev->asid during initialization
KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror()

arch/x86/kvm/svm/sev.c | 42 +++++++++++++++++++++++++++---------------
arch/x86/kvm/svm/svm.h | 2 +-
2 files changed, 28 insertions(+), 16 deletions(-)

Queued all except 2.