DF-5365 / fix_run.log
DF5365: MSR_APICBASE=0xfee00c00 -> real APIC page 0xfee00000 DF5365: lapic_mem=0 (production state) DF5365: offsets: lint0=0x350 lint1=0x360 err=0x370 pcint=0x340 tmr=0x320 tpr=0x80 svr=0xf0 eoi=0xb0 dcr=0x3e0 icr_tm=0x380 LAPIC: bogus LAPIC address 0xd9d8000 in firmware table, using 0xfee00000 from APIC base MSR DF5365: A: mapped attacker PA 0xd9d8000 (kva 0xfffff80116c7e000) DF5365: A: LAPIC_MEM_READ(version)=ffffffff (attacker fill 0xaaaaaaaa) READ-PRIMITIVE ? DF5365: A: svr=0xaaaaaaaa lint0=0xaaaaaaaa lint1=0xaaaaaaaa tmr=0xaaaaaaaa (fill was 0xaaaaaaaa) DF5365: A: 0/7 register cells of the attacker page were written by the production store set -> partial LAPIC: bogus LAPIC address 0x18d9dac in firmware table, using 0xfee00000 from APIC base MSR DF5365: B: mapped kernel BSS PA 0x18d9dac so that 'icr_timer' aliases cpu_id_to_apic_id[3] DF5365: B: cpu_id_to_apic_id[3] before=0x00000003 DF5365: B: cpu_id_to_apic_id[3] after =0x00000003 -> KERNEL-BSS CORRUPTION not-confirmed DF5365: state restored (cpu_id_to_apic_id[3]=0x00000003 lapic_mem=0) DF5365: done