xen: Insufficient bounding of "REP MOVS" to MMIO emulated inside the hypervisor (xsa112)

An insufficient bound checking flaw was found in the Xen hypervisor's implementation of acceleration support for the "REP MOVS" instructions. A privileged HVM guest user could potentially use this flaw to crash the host...