From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Google-Smtp-Source: AH8x2262Q/DPP7cvGQAxJFs9X7XxKyTvZk4b3Fi4itG17bKVujsnj3CpM9IF94QvG5C7jrodW3fg ARC-Seal: i=1; a=rsa-sha256; t=1517417762; cv=none; d=google.com; s=arc-20160816; b=S/jnnc+eXkgfFayo0QRWyPRkDgA0kkouKoWUsfq3ihB6POxjpWs7IOcg9CiLpb4Q7R yvL5GZELDPvMagslTKPtHr3DbTjWRiQY11tVgkYy56AFB1eDtH62yqiTXisXZLeGRm6k pRrHG9J+i1VieBTTy3Fhy3gi34+kN9iivXiQW8sTw/DUpo5ClmMgRC4Q/AFZWMtM3xFD 1fn7fQ/QUZ2Sly0AgnkDMZr3DpNg+Yrq9Q4q0lY8fjCTvjzBtsK7FmVOMa2egFv9cmiR c5IdkObLGM1VnJsUrUQ44/lmxhVbqVt5xwVtVavkhGFMPBWNfdRlJY6vojV3e2FKe3yn 4TFA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject :arc-authentication-results; bh=VD7jZzVwgbdLGNHMQ3V9vgUZl4VH+7RJQkKhsjjDceA=; b=cH3a7H9VqS7rUG9VqX+2Kd84pyqmskwZYO3+N87xyhTo2MuFCDRYolwM5FWKQKbBXx LCqZeYf2dcb3ewUrDaLq7xLQ8kFRdNsi/ReWW4oiU3tWAdQhotxfR/YwDMKansfeLGRZ KLPa7QesWVv5cXAqrRtnw7DoepJs69myT/1U1E70czdrK0eiEkvVV1SLaSVmKgqOBMpN suqB8RUSIB7gp1qSu5Ah4Ty2Z6uuTpTQ6YrmQDaQBNAbOfP0iM2StNAhS/3Sc+cUBYNh 5AyO0xENl+SOCOSeIp2IMzHsSnbDQoYqeBLRkyvN5YEcva03/bNla5ZmV6+2cZ/rjZWo m9lQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of pbonzini@redhat.com designates 209.132.183.28 as permitted sender) smtp.mailfrom=pbonzini@redhat.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Authentication-Results: mx.google.com; spf=pass (google.com: domain of pbonzini@redhat.com designates 209.132.183.28 as permitted sender) smtp.mailfrom=pbonzini@redhat.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Subject: Re: [PATCH v4 2/5] KVM: x86: Add IBPB support To: Jim Mattson , KarimAllah Ahmed Cc: the arch/x86 maintainers , LKML , kvm list , Ashok Raj , Asit Mallick , Dave Hansen , Arjan Van De Ven , Tim Chen , Linus Torvalds , Andrea Arcangeli , Andi Kleen , Thomas Gleixner , Dan Williams , Jun Nakajima , Andy Lutomirski , Greg KH , Peter Zijlstra , David Woodhouse References: <1517404231-22406-1-git-send-email-karahmed@amazon.de> <1517404231-22406-3-git-send-email-karahmed@amazon.de> From: Paolo Bonzini Message-ID: <7dbf6cad-f03d-640c-bc95-d82deaa30cb7@redhat.com> Date: Wed, 31 Jan 2018 11:55:52 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-getmail-retrieved-from-mailbox: INBOX X-GMAIL-THRID: =?utf-8?q?1591113771329535327?= X-GMAIL-MSGID: =?utf-8?q?1591127847412368341?= X-Mailing-List: linux-kernel@vger.kernel.org List-ID: On 31/01/2018 11:50, Jim Mattson wrote: >> + if (to_vmx(vcpu)->save_spec_ctrl_on_exit) { >> + nested_vmx_disable_intercept_for_msr( >> + msr_bitmap_l1, msr_bitmap_l0, >> + MSR_IA32_PRED_CMD, >> + MSR_TYPE_R); >> + } > I don't think this should be predicated on > "to_vmx(vcpu)->save_spec_ctrl_on_exit." Why not just > "guest_cpuid_has(vcpu, X86_FEATURE_IBPB)"? Also, the final argument to > nested_vmx_disable_intercept_for_msr should be MSR_TYPE_W rather than > MSR_TYPE_R. In fact this MSR can even be passed down unconditionally, since it needs no save/restore and has no ill performance effect on the sibling hyperthread. Only MSR_IA32_SPEC_CTRL needs to be conditional on "to_vmx(vcpu)->save_spec_ctrl_on_exit". Paolo