[PATCH v1 1/8] virtio: Force only split mode with protected guest

Andi Kleen
Thu, 03 Jun 2021 02:56:46 -0000

>
> I agree, but I want to know why indirect descriptor needs to be
> disabled. The table can't be wrote by the device since it's not
> coherent swiotlb mapping.

I had all kinds of problems with uninitialized entries in the indirect
table. So I gave up on it and concluded it would be too difficult to secure.


-Andi