From nobody Sat Feb 7 06:55:51 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass(p=reject dis=none) header.from=citrix.com ARC-Seal: i=1; a=rsa-sha256; t=1713878024; cv=none; d=zohomail.com; s=zohoarc; b=aaWPAoTwbg9eFt7PjFEpTKMJp3MEUyQheW+Og7Cc1KG/6rz59y6JU2dUW3vd+34IG9Mtco7U3Su/c77EgULFHJZslG0r+sBQxpt34cymxaUKjAQRoN6xFuvmRROVHZinoiRDSsveLI//Z0nCXahy/wL0LbLlS0m2ijE6447qgX8= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1713878024; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=9lVrOUiErpOt1x6JV3axiTLKkLJOBS6S5d/ZUHk5bIc=; b=Lr6c92zRbF52TJu0ITsjoVBD1mxDpg4Gm+vH11OfBa8ulIbN3+pA61WbXElj5seH+Ny74xCO+s2d5uFqNj6lvc9KBAuFEp8r0vg8Cut0jgBIJuMC8CAKXHgqDCdxRws0Ji5QBK39um/qU9gmOJZ12AQbu1klw7XhCsHT8lC5P0o= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass header.from= (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1713878024285110.18465338790384; Tue, 23 Apr 2024 06:13:44 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.710599.1109899 (Exim 4.92) (envelope-from ) id 1rzFxb-0001uC-ES; Tue, 23 Apr 2024 13:13:23 +0000 Received: by outflank-mailman (output) from mailman id 710599.1109899; Tue, 23 Apr 2024 13:13:23 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1rzFxb-0001u5-AW; Tue, 23 Apr 2024 13:13:23 +0000 Received: by outflank-mailman (input) for mailman id 710599; Tue, 23 Apr 2024 13:13:22 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1rzFxa-0001Ql-Rw for xen-devel@lists.xenproject.org; Tue, 23 Apr 2024 13:13:22 +0000 Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [2607:f8b0:4864:20::f2e]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 42435226-0173-11ef-909a-e314d9c70b13; Tue, 23 Apr 2024 15:13:22 +0200 (CEST) Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-69943ef42b2so35071576d6.3 for ; Tue, 23 Apr 2024 06:13:22 -0700 (PDT) Received: from localhost ([213.195.114.223]) by smtp.gmail.com with ESMTPSA id j13-20020a0c9ccd000000b00696ae38c7bfsm1873408qvf.35.2024.04.23.06.13.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 23 Apr 2024 06:13:20 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: 42435226-0173-11ef-909a-e314d9c70b13 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1713878000; x=1714482800; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=9lVrOUiErpOt1x6JV3axiTLKkLJOBS6S5d/ZUHk5bIc=; b=BnRAAg28kJD6rteH7YK1NqkGnUaajHjAYnaE4CtlzV9DSTqBKFyDDb4l5fgLJxZQrx +uS8SPafIvRHJfnHjUgK7R2Ak23RkD3k4IpXxInLLV/8M/30vD6nn5TozPMT22wXlCPk r+czaBPH+e6pbDOr/EetIuSzrrPHfJ2fpNPDc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1713878000; x=1714482800; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=9lVrOUiErpOt1x6JV3axiTLKkLJOBS6S5d/ZUHk5bIc=; b=d0ZRIUXKLcbHwsdxSlcUrI2RzqC20BwzlC9JKzhycnpErFo8Uu9gUI7C4ETLHHPUnB evCUgoT7/r68wMncgfRsdmoLz/OWhswoTmh5IbniKFpe6J00MpdjT9uGgF9TIFc/egVq kfkQ3gHCEDS5bx1ZiGoDwEHR1rzAXVbC6nF0lGm4XnbYsXr9V3eOWK4BzyBnala/yp9o BS8j+qdWcV8h0Hu5kjT87Sp+FDsl0LoGTQ1gGGv9ZKO59agEHREd84ThBXrRQpmscy75 2cbuBbkdPCldkPWGe3FzhfbEFs8dy7pWxlZWz/NOIbnMgiBbMEi/waar7UihWm+OJ05+ D9SA== X-Gm-Message-State: AOJu0YxirbD6C1xCZttljN5Gesso1RnsWf64koCnC1HTgByrzs3Fldgj l0kiJV8jRsxitl+bSuZQ9sZsCPR3TpH/aXL/42x9GzNE2zJbK7+HMvqAZfY7wXUOgN/ijIiJ4zE k X-Google-Smtp-Source: AGHT+IGbE3VkQVmviVP1Axw9WTZGVRmI92gcwDwQiFszisQYYKjsnxydqejs4/D22QWc6TiW++s36Q== X-Received: by 2002:ad4:44a1:0:b0:6a0:49d5:c4fb with SMTP id n1-20020ad444a1000000b006a049d5c4fbmr13419031qvt.31.1713878000330; Tue, 23 Apr 2024 06:13:20 -0700 (PDT) From: Roger Pau Monne To: xen-devel@lists.xenproject.org Cc: Roger Pau Monne , Anthony PERARD , Juergen Gross , Andrew Cooper , George Dunlap , Jan Beulich , Julien Grall , Stefano Stabellini , Ross Lagerwall Subject: [PATCH v3 2/4] livepatch: introduce --force option Date: Tue, 23 Apr 2024 15:12:47 +0200 Message-ID: <20240423131249.29825-3-roger.pau@citrix.com> X-Mailer: git-send-email 2.44.0 In-Reply-To: <20240423131249.29825-1-roger.pau@citrix.com> References: <20240423131249.29825-1-roger.pau@citrix.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1713878026321100002 Introduce a xen-livepatch tool --force option, that's propagated into the hyerpvisor for livepatch operations. The intention is for the option to be used to bypass some checks that would otherwise prevent the patch from being loaded. Re purpose the pad field in xen_sysctl_livepatch_op to be a flags field that applies to all livepatch operations. The flag is currently only set by the hypercall wrappers for the XEN_SYSCTL_LIVEPATCH_UPLOAD operation, as that's= so far the only one where it will be used initially. Other uses can be added = as required. Note that helpers would set the .pad field to 0, that's been removed since = the structure is already zero initialized at definition. No functional usages of the new flag introduced in this patch. Signed-off-by: Roger Pau Monn=C3=A9 Acked-by: Anthony PERARD Acked-by: Jan Beulich --- Changes since v2: - New in this version. --- tools/include/xenctrl.h | 3 ++- tools/libs/ctrl/xc_misc.c | 7 +++---- tools/misc/xen-livepatch.c | 21 +++++++++++++++++++-- xen/common/livepatch.c | 3 ++- xen/include/public/sysctl.h | 4 +++- 5 files changed, 29 insertions(+), 9 deletions(-) diff --git a/tools/include/xenctrl.h b/tools/include/xenctrl.h index 2ef8b4e05422..499685594427 100644 --- a/tools/include/xenctrl.h +++ b/tools/include/xenctrl.h @@ -2555,7 +2555,8 @@ int xc_psr_get_hw_info(xc_interface *xch, uint32_t so= cket, #endif =20 int xc_livepatch_upload(xc_interface *xch, - char *name, unsigned char *payload, uint32_t size); + char *name, unsigned char *payload, uint32_t size, + bool force); =20 int xc_livepatch_get(xc_interface *xch, char *name, diff --git a/tools/libs/ctrl/xc_misc.c b/tools/libs/ctrl/xc_misc.c index 5ecdfa2c7934..50282fd60dcc 100644 --- a/tools/libs/ctrl/xc_misc.c +++ b/tools/libs/ctrl/xc_misc.c @@ -576,7 +576,8 @@ int xc_getcpuinfo(xc_interface *xch, int max_cpus, int xc_livepatch_upload(xc_interface *xch, char *name, unsigned char *payload, - uint32_t size) + uint32_t size, + bool force) { int rc; struct xen_sysctl sysctl =3D {}; @@ -612,7 +613,7 @@ int xc_livepatch_upload(xc_interface *xch, =20 sysctl.cmd =3D XEN_SYSCTL_livepatch_op; sysctl.u.livepatch.cmd =3D XEN_SYSCTL_LIVEPATCH_UPLOAD; - sysctl.u.livepatch.pad =3D 0; + sysctl.u.livepatch.flags =3D force ? LIVEPATCH_FLAG_FORCE : 0; sysctl.u.livepatch.u.upload.size =3D size; set_xen_guest_handle(sysctl.u.livepatch.u.upload.payload, local); =20 @@ -656,7 +657,6 @@ int xc_livepatch_get(xc_interface *xch, =20 sysctl.cmd =3D XEN_SYSCTL_livepatch_op; sysctl.u.livepatch.cmd =3D XEN_SYSCTL_LIVEPATCH_GET; - sysctl.u.livepatch.pad =3D 0; =20 sysctl.u.livepatch.u.get.status.state =3D 0; sysctl.u.livepatch.u.get.status.rc =3D 0; @@ -985,7 +985,6 @@ static int _xc_livepatch_action(xc_interface *xch, =20 sysctl.cmd =3D XEN_SYSCTL_livepatch_op; sysctl.u.livepatch.cmd =3D XEN_SYSCTL_LIVEPATCH_ACTION; - sysctl.u.livepatch.pad =3D 0; sysctl.u.livepatch.u.action.cmd =3D action; sysctl.u.livepatch.u.action.timeout =3D timeout; sysctl.u.livepatch.u.action.flags =3D flags; diff --git a/tools/misc/xen-livepatch.c b/tools/misc/xen-livepatch.c index a246e5dfd38e..cf2e5fada12d 100644 --- a/tools/misc/xen-livepatch.c +++ b/tools/misc/xen-livepatch.c @@ -19,11 +19,15 @@ =20 static xc_interface *xch; =20 +/* Global option to disable checks. */ +static bool force; + void show_help(void) { fprintf(stderr, "xen-livepatch: live patching tool\n" - "Usage: xen-livepatch [args] [command-flags]\n" + "Usage: xen-livepatch [--force] [args] [command-flag= s]\n" + " Use --force option to bypass some checks.\n" " An unique name of payload. Up to %d characters.\n" "Commands:\n" " help display this help\n" @@ -240,7 +244,7 @@ static int upload_func(int argc, char *argv[]) return saved_errno; } printf("Uploading %s... ", filename); - rc =3D xc_livepatch_upload(xch, name, fbuf, len); + rc =3D xc_livepatch_upload(xch, name, fbuf, len, force); if ( rc ) { rc =3D errno; @@ -571,6 +575,19 @@ int main(int argc, char *argv[]) show_help(); return 0; } + + if ( !strncmp("--force", argv[1], strlen("--force")) ) + { + if ( argc <=3D 2 ) + { + show_help(); + return EXIT_FAILURE; + } + force =3D true; + argv++; + argc--; + } + for ( i =3D 0; i < ARRAY_SIZE(main_options); i++ ) if (!strncmp(main_options[i].name, argv[1], strlen(main_options[i].name))) diff --git a/xen/common/livepatch.c b/xen/common/livepatch.c index 351a3e0b9a60..1503a84457e4 100644 --- a/xen/common/livepatch.c +++ b/xen/common/livepatch.c @@ -2125,7 +2125,8 @@ int livepatch_op(struct xen_sysctl_livepatch_op *live= patch) { int rc; =20 - if ( livepatch->pad ) + if ( livepatch->flags & ~LIVEPATCH_FLAGS_MASK && + !(livepatch->flags & LIVEPATCH_FLAG_FORCE) ) return -EINVAL; =20 switch ( livepatch->cmd ) diff --git a/xen/include/public/sysctl.h b/xen/include/public/sysctl.h index 9b19679caeb1..febaa4b16ab7 100644 --- a/xen/include/public/sysctl.h +++ b/xen/include/public/sysctl.h @@ -1139,7 +1139,9 @@ struct xen_sysctl_livepatch_action { =20 struct xen_sysctl_livepatch_op { uint32_t cmd; /* IN: XEN_SYSCTL_LIVEPATCH_*.= */ - uint32_t pad; /* IN: Always zero. */ + uint32_t flags; /* IN, flags. */ +#define LIVEPATCH_FLAG_FORCE (1u << 0) /* Skip some checks. */ +#define LIVEPATCH_FLAGS_MASK LIVEPATCH_FLAG_FORCE union { struct xen_sysctl_livepatch_upload upload; struct xen_sysctl_livepatch_list list; --=20 2.44.0