Reset more vcpu state on snapshot-restore

Signed-off-by: Ludvig Liljenberg <[email protected]>

Author: ludfjig

Cargo.lock

@@ -84,6 +84,7 @@ mshv-ioctls = { version = "0.6", optional = true}
 uuid = { version = "1.20.0", features = ["v4"] }
 signal-hook-registry = "1.4.8"
 serde = "1.0"
+iced-x86 = { version = "1.21", default-features = false, features = ["std", "code_asm"] }
 proptest = "1.9.0"
 tempfile = "3.24.0"
 crossbeam-queue = "0.3.12"

src/hyperlight_host/Cargo.toml

@@ -326,7 +326,10 @@ impl HyperlightError {
             | HyperlightError::StackOverflow()
             | HyperlightError::MemoryAccessViolation(_, _, _)
             | HyperlightError::SnapshotSizeMismatch(_, _)
-            | HyperlightError::MemoryRegionSizeMismatch(_, _, _) => true,
+            | HyperlightError::MemoryRegionSizeMismatch(_, _, _)
+            // HyperlightVmError::Restore is already handled manually in restore(), but we mark it
+            // as poisoning here too for defense in depth.
+            | HyperlightError::HyperlightVmError(HyperlightVmError::Restore(_)) => true,
 
             // These errors poison the sandbox because they can leave
             // it in an inconsistent state due to snapshot restore