| commit | 19b984fbda4d9ca68d2b05f943a4d2da896dd0e1 | [log] [tgz] |
|---|---|---|
| author | Jaewan Kim <jaewan@google.com> | Mon Dec 04 15:16:50 2023 +0900 |
| committer | Jaewan Kim <jaewan@google.com> | Thu Dec 21 22:57:53 2023 +0900 |
| tree | 8023746216bad5bba11d01684a64b3039653330c | |
| parent | 226e3ea3ef8b26539299dddd7aaff0428b1a0447 [diff] |
pvmfw: Validate incoming <reg> and <iommus> against phys'
This adds following validations:
- reg:
- Validates that PV reg and phys reg match in order via HVC
- Validates that there's no overlap among all PV reg and phys reg
- iommus:
- Validates that pvIOMMU and IOMMU match via HVC
- Validates that (IOMMU token, SID) pair is unique
- Validates that (pvIOMMU id, vSID) pair is unique
Bug: 277993056
Test: atest libpvmfw.device_assignment.test, launch protected VM
Change-Id: Iffe3ecf41bf13fca869849c50996ba6fbaea7955
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: