Konstantin BogomolovandgVisor bot 4cdc108eff KVM: Enable PAC inside of the guest with zeroed keys. ...

Non-hint PAC instructions will generate a SIGILL even if PAC has never been
enabled in the guest. This is circumvented by enabling PAC in the guest, but
setting all of the PAC keys to zero which effectively makes all PAC instructions
no-ops, as was originally the intention with disabling PAC in KVM in the
first place.

PiperOrigin-RevId: 974001522

2026-08-31 11:58:02 -07:00

..

testutil

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

address_space_amd64.go

Add KVM specific metrics.

2022-05-06 12:21:49 -07:00

address_space_arm64.go

…

address_space.go

kvm: honor memmap.File.MemoryType()

2025-03-17 11:34:50 -07:00

bluepill_allocator.go

platform/kvm: refactor handleBluepillFault to reduce stack usage

2024-10-01 17:09:18 -07:00

bluepill_amd64_unsafe.go

kvm: add more debug info on unexpected exits

2025-11-07 16:26:17 -08:00

bluepill_amd64.go

platform/kvm: panic if ip, sp or bp point to kernel addresses upon exits

2025-10-06 16:54:19 -07:00

bluepill_amd64.s

kvm: mark readAndResetDR6 and callees nosplit

2025-07-25 13:20:34 -07:00

bluepill_arm64_unsafe.go

kvm: Enhance debugging of unexpected vCPU exits

2025-07-15 05:17:48 -07:00

bluepill_arm64.go

platform/kvm: panic if ip, sp or bp point to kernel addresses upon exits

2025-10-06 16:54:19 -07:00

bluepill_arm64.s

kvm/arm64: disable host PAC to fix VDSO crash in sentry guest

2026-06-03 16:45:41 -07:00

bluepill_fault.go

kvm: limit virtual address space to 47-bit on amd64

2026-01-08 00:00:55 -08:00

bluepill_unsafe.go

kvm: Exit cleanly on ENOMEM/ENOSPC errnos from KVM_RUN.

2026-05-21 17:01:34 -07:00

bluepill.go

kvm: Enhance debugging of unexpected vCPU exits

2025-07-15 05:17:48 -07:00

BUILD

Defer release of slow-to-release FDs via disabled io_uring ring.

2026-08-20 18:27:54 -07:00

config.go

Defer release of slow-to-release FDs via disabled io_uring ring.

2026-08-20 18:27:54 -07:00

context.go

Merge pull request #12598 from tamird:nogo-more-checks

2026-02-20 11:35:37 -08:00

filters_amd64.go

Platform interface: Group seccomp-related information to a sub-interface.

2023-11-17 14:12:59 -08:00

filters_arm64.go

kvm/arm64: disable host PAC to fix VDSO crash in sentry guest

2026-06-03 16:45:41 -07:00

filters.go

kvm, eventfd: support KVM_IOEVENTFD

2025-05-05 10:42:51 -07:00

ioeventfd_unsafe.go

kvm, eventfd: support KVM_IOEVENTFD

2025-05-05 10:42:51 -07:00

ioeventfd.go

kvm, eventfd: support KVM_IOEVENTFD

2025-05-05 10:42:51 -07:00

kvm_amd64_test.go

kvm: check CPL to find out if the Sentry is in VM

2024-09-11 18:52:36 -07:00

kvm_amd64_test.s

kvm: add vmcall/vmmcall benchmark

2024-08-27 13:52:47 -07:00

kvm_amd64_unsafe.go

kvm: Replace all instances of unix.RawSyscall with pkg/hostsyscall variants.

2024-10-01 13:12:57 -07:00

kvm_amd64.go

KVM: Dynamically size IPA and fault blocks on ARM64

2026-07-08 11:05:02 -07:00

kvm_arm64_test.go

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

kvm_arm64_unsafe.go

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

kvm_arm64.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

kvm_const_amd64.go

Set TSC offset directly.

2022-11-09 20:41:25 -08:00

kvm_const_arm64.go

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

kvm_const.go

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

kvm_profiling_fake.go

Enable easy creation of independent profiling metrics.

2023-10-05 15:56:37 -07:00

kvm_profiling.go

Enable easy creation of independent profiling metrics.

2023-10-05 15:56:37 -07:00

kvm_safecopy_test.go

kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host

2025-05-02 18:09:46 -07:00

kvm_test.go

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

kvm.go

Defer release of slow-to-release FDs via disabled io_uring ring.

2026-08-20 18:27:54 -07:00

machine_amd64_unsafe.go

kvm: honor memmap.File.MemoryType()

2025-03-17 11:34:50 -07:00

machine_amd64.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

machine_arm64_unsafe.go

KVM: Enable PAC inside of the guest with zeroed keys.

2026-08-31 11:58:02 -07:00

machine_arm64.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

machine_cgo.go

platform/kvm: don't map the entire sentry address space to VM

2024-10-18 14:09:29 -07:00

machine_unsafe.go

Fix improper use of RawSyscall in KVM

2024-10-02 16:18:06 -07:00

machine.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

physical_map_amd64.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

physical_map_arm64.go

kvm: handle mappings in the extended address space properly

2026-01-20 19:08:18 -08:00

physical_map.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

seccomp_mmap_unsafe.go

platform/kvm: refactor handleBluepillFault to reduce stack usage

2024-10-01 17:09:18 -07:00

virtual_map_test.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00

virtual_map.go

Detect if vvar is not mappable into the guest on ARM.

2026-08-21 18:23:37 -07:00