Protection against interrupts in virtual machine functions

摘要

A system, methods, and apparatus for protection against interrupts in virtual machine functions are disclosed. A system includes memory, one or more physical processors, a virtual machine executing on the one or more physical processors, and a hypervisor executing on the one or more physical processors. The hypervisor determines a first location in the memory, corresponding to a physical address of the virtual machine function, and loads into memory at a second location in the memory outside the first location in the memory. The hypervisor initializes abort code at the second location in the memory. Prior to an execution of an instruction that loads an interrupt data structure on the virtual machine, a trap to the hypervisor is activated. The hypervisor then modifies a page table corresponding to the interrupt data structure to point to the initialized abort code.

主权项

1. A system comprising:
a memory; one or more processors, coupled to the memory; a virtual machine executing on the one or more processors; and a hypervisor executing on the one or more processors to:
determine a first location in the memory, corresponding to a physical address of a virtual machine function;load into the memory at a second location in the memory outside the first location in the memory;initialize code at the second location in the memory, wherein the code is configured to cause the virtual machine function to abort;activate a trap to the hypervisor prior to an execution of an instruction that loads an interrupt data structure on the virtual machine; andmodify a page table corresponding to the interrupt data structure to point to the initialized code.