gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-07-22	kvm: set CR0.NE = 1	Andrei Vagin
	CR0.NE enables internal x87 floating point error reporting when set, else enables PC style x87 error detection. On AMD, the #MF exception isn't generated if CR0.NE isn't set. PiperOrigin-RevId: 386340269
2021-07-20	Add go:build directives as required by Go 1.17's gofmt.	Jamie Liu
	PiperOrigin-RevId: 385894869
2021-07-20	ring0: Initialize sentryXCR0 from Kernel.init()	Andrei Vagin
	Fixes #6300 PiperOrigin-RevId: 385840917
2021-07-12	Go 1.17 support for the KVM platform	Michael Pratt
	Go 1.17 adds a new register-based calling convention. While transparent for most applications, the KVM platform needs special work in a few cases. First of all, we need the actual address of some assembly functions, rather than the address of a wrapper. See http://gvisor.dev/pr/5832 for complete discussion of this. More relevant to this CL is that ABI0-to-ABIInternal wrappers (i.e., calls from assembly to Go) access the G via FS_BASE. The KVM quite fast-and-loose about the Go environment, often calling into (nosplit) Go functions with uninitialized FS_BASE. That will no longer work in Go 1.17, so this CL changes the platform to consistently restore FS_BASE before calling into Go code. This CL does not affect arm64 code. Go 1.17 does not support the register-based calling convention for arm64 (it will come in 1.18), but arm64 also does not use a non-standard register like FS_BASE for TLS, so it may not require any changes. PiperOrigin-RevId: 384234305
2021-06-11	Rework the workaround of the XCR0 issue	Andrei Vagin
	XCR0 has to be synchronized with the host. We can call xsave from the host context and then call xrstor from the guest context and vise versa. This means we need to support the same set of FPU features in both contexts. PiperOrigin-RevId: 378988281
2021-04-09	Merge pull request #5767 from avagin:mxcsr	gVisor bot
	PiperOrigin-RevId: 367730917
2021-04-01	platform/kvm/x86: restore mxcsr when switching from guest to sentry	Andrei Vagin
	Goruntime sets mxcsr once and never changes it. Reported-by: syzbot+ec55cea6e57ec083b7a6@syzkaller.appspotmail.com Fixes: #5754
2021-03-29	[syserror] Split usermem package	Zach Koopmans
	Split usermem package to help remove syserror dependency in go_marshal. New hostarch package contains code not dependent on syserror. PiperOrigin-RevId: 365651233
2021-03-23	Move the code that manages floating-point state to a separate package	Andrei Vagin
	This change is inspired by Adin's cl/355256448. PiperOrigin-RevId: 364695931
2021-02-02	Move ring0 package.	Adin Scannell
	This allows the package to serve as a general purpose ring0 support package, as opposed to being bound to specific sentry platforms. Updates #5039 PiperOrigin-RevId: 355220044