Re: [Qemu-devel] Re: [PATCH 5/5] Port apic to new VMState design

[Gerd Hoffmann]

> Basically what I am asking is if you couldn't just add an optional
> callback so some additional stuff can be done after the "basic" state
> has been loaded - or if that isn't desired at least a callback that
> allows verifying the loaded values and aborting execution.

I think we are going to need post-processing callbacks anyway.  Several 
drivers have to do some actions after loading the state information. 
There you'll be able to set the stats size and also perform sanity 
checks on the loaded state.

> That is completely different from what I meant.
> Changing the RAM compromises the VM and only the VM, an exploit in a
> device emulation might allow to compromise the _host_. Is it now clearer
> what I meant?

When you are able modify the savevm state you already have access to the 
host ...

cheers,
  Gerd