sluck-msft

[SNP Guest VSM] ModifyVtlProtectionMask hypercall handling

1

Implements ModifyVtlProtectionMask hypercall handling for SNP VMs with guest VSM. Tested with: SNP without guest vsm TDX-isolated VMs Non-isolated with and without guest vsm VBS-isolated with and without guest vsm

Remove hardcoding of last vtl to VTL 0. Retrieve the actual last vtl that was running from the intercept message. Tested booting of ARM, SNP, TDX, and Trusted Launch VMs

In preparation for VTL 1 memory support for CVMs, make the shared/encrypted bitmap tracking available on a partition-level, rather than in the GuestMemoryMapping (which ends up being per-VTL). Also includes...

cvm: evaluate protecting the event_inject (and TDX-equivalent) VMSA field

2

The concern is that we might lose events, or not correctly inject a double-fault, if code just simply overwrites the event_inject field without first evaluating what's in it. Consider adding...

When sending VTL 1 an intercept (as part of e.g. cr access, etc), investigate using ProcessorSynic::post_message directly.