View Single Post
  #8  
Old 02-15-2015, 21:14
deroko's Avatar
deroko deroko is offline
cr4zyserb
 
Join Date: Nov 2005
Posts: 217
Rept. Given: 13
Rept. Rcvd 30 Times in 14 Posts
Thanks Given: 7
Thanks Rcvd at 33 Times in 16 Posts
deroko Reputation: 30
@Kerlingen: On x64 you may use hardware virtualization to catch int 0e, and of course, your vmenter can be redirected to code which will act as int 0e hook, thus implementing this on x64 is trivial In this scenario it doesn't really matter if it's old vmx which causes TLB to be flushed on vmexits or new which can preserve it, as anyhow physical page to which you want to access has P bit cleared in PTE and if TLB is flushed you come to your int 0e hook, only benefit which new vmx brings in terms of preserving TLB is just speedup in case of access to nonpaged code/data in kernel memory
__________________
http://accessroot.com

Last edited by deroko; 02-15-2015 at 21:37.
Reply With Quote
The Following User Gave Reputation+1 to deroko For This Useful Post:
b30wulf (02-15-2015)
The Following User Says Thank You to deroko For This Useful Post:
sh3dow (11-22-2022)