Restrict guest execution capabilities during snapshot

Set a host-owned Checkpointing execution mode before entering the guest.
During that mode, outb_virtq_call must reject ordinary G2H function requests before call_host_function .
Permit only operations required by checkpointing, such as logs, completion notification, abort, and cancellation.
Clear the mode on every exit path.
Validate the queues and mailbox after the guest returns. Do not trust the dedicated guest routine to have behaved correctly.

Navigation Menu