3 messages in com.xensource.lists.xen-bugs[Xen-bugs] [Bug 1092] an unprivileged...
FromSent OnAttachments
bugz...@lists.xensource.com20 Oct 2007 09:56 
bugz...@lists.xensource.com20 Oct 2007 10:38 
bugz...@lists.xensource.com21 Oct 2007 00:49 
Subject:[Xen-bugs] [Bug 1092] an unprivileged guest can crash a 3.1.0 hypervisor
From:bugz...@lists.xensource.com (bugz@lists.xensource.com)
Date:10/20/2007 10:38:47 AM
List:com.xensource.lists.xen-bugs

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1092

bou@netbsd.org changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |bou@netbsd.org

------- Comment #1 from bou@netbsd.org 2007-10-20 10:39 ------- (In reply to comment #0)

While working on NetBSD/amd64 Xen support, I found that if the %cs and/or %ss registers are changed to e.g. 0x17 in the trap frame before HYPERVISOR_iret

It's setting %cs to 0x17 which makes it crash (it's not a text segment). %ss can be set to 0x17 without troubles.