Blame SOURCES/kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch

383d26
From 38633bfc500ac284a13f7da53ea5aabacb8006e1 Mon Sep 17 00:00:00 2001
383d26
From: "plai@redhat.com" <plai@redhat.com>
383d26
Date: Tue, 4 Jun 2019 21:47:26 +0200
383d26
Subject: [PATCH 07/23] i386: kvm: Disable arch_capabilities if MSR can't be
383d26
 set
383d26
383d26
RH-Author: plai@redhat.com
383d26
Message-id: <1559684847-10889-8-git-send-email-plai@redhat.com>
383d26
Patchwork-id: 88536
383d26
O-Subject: [RHEL7.7 qemu-kvm-rhev PATCH v4 7/8] i386: kvm: Disable arch_capabilities if MSR can't be set
383d26
Bugzilla: 1709972
383d26
RH-Acked-by: Eduardo Habkost <ehabkost@redhat.com>
383d26
RH-Acked-by: Paolo Bonzini <pbonzini@redhat.com>
383d26
RH-Acked-by: Miroslav Rezanina <mrezanin@redhat.com>
383d26
383d26
From: Eduardo Habkost <ehabkost@redhat.com>
383d26
383d26
KVM has two bugs in the handling of MSR_IA32_ARCH_CAPABILITIES:
383d26
383d26
1) Linux commit commit 1eaafe91a0df ("kvm: x86: IA32_ARCH_CAPABILITIES
383d26
   is always supported") makes GET_SUPPORTED_CPUID return
383d26
   arch_capabilities even if running on SVM.  This makes "-cpu
383d26
   host,migratable=off" incorrectly expose arch_capabilities on CPUID on
383d26
   AMD hosts (where the MSR is not emulated by KVM).
383d26
383d26
2) KVM_GET_MSR_INDEX_LIST does not return MSR_IA32_ARCH_CAPABILITIES if
383d26
   the MSR is not supported by the host CPU.  This makes QEMU not
383d26
   initialize the MSR properly at kvm_put_msrs() on those hosts.
383d26
383d26
Work around both bugs on the QEMU side, by checking if the MSR
383d26
was returned by KVM_GET_MSR_INDEX_LIST before returning the
383d26
feature flag on kvm_arch_get_supported_cpuid().
383d26
383d26
This has the unfortunate side effect of making arch_capabilities
383d26
unavailable on hosts without hardware support for the MSR until bug #2
383d26
is fixed on KVM, but I can't see another way to work around bug #1
383d26
without that side effect.
383d26
383d26
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
383d26
Message-Id: <20190125220606.4864-2-ehabkost@redhat.com>
383d26
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
383d26
(cherry picked from commit 485b1d256bcb0874bcde0223727c159b6837e6f8)
383d26
Signed-off-by: Paul Lai <plai@redhat.com>
383d26
Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
383d26
---
383d26
 target/i386/kvm.c | 9 +++++++++
383d26
 1 file changed, 9 insertions(+)
383d26
383d26
diff --git a/target/i386/kvm.c b/target/i386/kvm.c
383d26
index c99c0ef..7afad93 100644
383d26
--- a/target/i386/kvm.c
383d26
+++ b/target/i386/kvm.c
383d26
@@ -374,6 +374,15 @@ uint32_t kvm_arch_get_supported_cpuid(KVMState *s, uint32_t function,
383d26
         if (host_tsx_blacklisted()) {
383d26
             ret &= ~(CPUID_7_0_EBX_RTM | CPUID_7_0_EBX_HLE);
383d26
         }
383d26
+    } else if (function == 7 && index == 0 && reg == R_EDX) {
383d26
+        /*
383d26
+         * Linux v4.17-v4.20 incorrectly return ARCH_CAPABILITIES on SVM hosts.
383d26
+         * We can detect the bug by checking if MSR_IA32_ARCH_CAPABILITIES is
383d26
+         * returned by KVM_GET_MSR_INDEX_LIST.
383d26
+         */
383d26
+        if (!has_msr_arch_capabs) {
383d26
+            ret &= ~CPUID_7_0_EDX_ARCH_CAPABILITIES;
383d26
+        }
383d26
     } else if (function == 0x80000001 && reg == R_ECX) {
383d26
         /*
383d26
          * It's safe to enable TOPOEXT even if it's not returned by
383d26
-- 
383d26
1.8.3.1
383d26