On Wed, May 12, 2021 at 04:39:43PM +0800, liulongfang wrote:

Therefore, this method of limiting the length of the BAR configuration space can prevent unsafe operations of the memory.

The issue is DMA controlled by the guest accessing the secure BAR area, not the guest CPU. Jason