Rizwan Qureshi has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/27369 )
Change subject: soc/intel/basecode: Add support for updating ucode loaded via FIT
......................................................................
Patch Set 33:
(2 comments)
> Patch Set 33:
>
> >> The more I'm thinking about this the more I realize that I don't
> >> understand the purpose of this update mechanism.
> >>
> >> For being able to …
[View More]perform the update, you already need a RO MCU that
> >> works good enough to get you to ramstage. At this point, you can
> >> already apply additional MCUs from any RW partition. So what kind of
> >> issue would have to be fixed by an update that makes use of this
> >> mechanism?
> >>
> >> In other words, what problem can this new update mechanism fix, that
> >> current mechanisms can't? And is it worth the added complexity and
> >> accompanying security degradation (more code is always more error-
> >> prone)?
> >
> > Microcode patch contains patch for Punit as well, and that has to
> > be applied prior to reset.
>
> Ah, understood. Thanks for the clarification.
>
> Ofc, it's too late for current products. But is there any change
> planned for the FIT update mechanism. e.g. a rule that multiple
> updates for one processor signature are allowed and the newest would
> be applied. That would make this much easier, would allow a single
> RO FIT with some entries pointing to RO and some to the MCU RW and
> we wouldn't need the top-swap feature any more.
>
If you haven't tried, add multiple microcode patches in FIT for the same processor
signature, you will find that FIT will pick the latest revision and load. However
there is no fallback if there is a failure.
2 FITs, 1 for normal boot, another for recovery boot.
Even if the CPU manages to load the latest revision (from the normal boot FIT) and that results in a hang/reboot loop. We need a tried and tested patch to recover from the hang/reboot for which the top-swap FIT will be used.
> > Hence the effort to load the updated microcode via FIT.
>
> This is probably the most urgent thing to mention in the commit
> message. Without this reasoning, it looks like you are just playing
> around and Intel adds complexity just because they can.
Ok. will update the commit message.
https://review.coreboot.org/#/c/27369/30/src/soc/intel/common/basecode/fw_u…
File src/soc/intel/common/basecode/fw_update/ucode_update.c:
https://review.coreboot.org/#/c/27369/30/src/soc/intel/common/basecode/fw_u…
PS30, Line 103: static int protect_staging(void)
> should be called in BS_POST_DEVICE
Claim an FPR and set the range as soon as you get an opportunity. Do you see a problem?
https://review.coreboot.org/#/c/27369/30/src/soc/intel/common/basecode/fw_u…
PS30, Line 118: check_and_update_ucode
> I think it would be good to check the FIT table itself too?
Because the FIT table will be in RO. I don't think we need to check that.
--
To view, visit https://review.coreboot.org/c/coreboot/+/27369
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Iab6ba36a2eb587f331fe522c778e2c430c8eb655
Gerrit-Change-Number: 27369
Gerrit-PatchSet: 33
Gerrit-Owner: Rizwan Qureshi <rizwan.qureshi(a)intel.com>
Gerrit-Reviewer: Aaron Durbin <adurbin(a)chromium.org>
Gerrit-Reviewer: Duncan Laurie <dlaurie(a)chromium.org>
Gerrit-Reviewer: Furquan Shaikh <furquan(a)google.com>
Gerrit-Reviewer: Martin Roth <martinroth(a)google.com>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Patrick Rudolph <patrick.rudolph(a)9elements.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Reviewer: Rizwan Qureshi <rizwan.qureshi(a)intel.com>
Gerrit-Reviewer: Subrata Banik <subrata.banik(a)intel.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Reviewer: dhaval v sharma <dhaval.v.sharma(a)intel.com>
Gerrit-CC: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-CC: Dhaval Sharma <dhaval.v.sharma(a)intel.corp-partner.google.com>
Gerrit-CC: Nico Huber <nico.h(a)gmx.de>
Gerrit-Comment-Date: Mon, 14 Jan 2019 14:25:11 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Arthur Heymans <arthur(a)aheymans.xyz>
Comment-In-Reply-To: Patrick Rudolph <patrick.rudolph(a)9elements.com>
Gerrit-MessageType: comment
[View Less]
Hello Patrick Rudolph, HAOUAS Elyes, Stefan Reinauer, Paul Menzel, build bot (Jenkins), Patrick Georgi, Martin Roth,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/25600
to look at the new patch set (#38).
Change subject: nb/intel/i945: Use parallel MP init
......................................................................
nb/intel/i945: Use parallel MP init
Use the parallel mp init path to initialize AP's. This should result
in a …
[View More]moderate speedup.
Tested on Intel D945GCLF (1 core 2 threads), still boots fine and is
26ms faster compared to lapic_cpu_init.
Change-Id: I955551b99e9cbc397f99c2a6bd355c6070390bcb
Signed-off-by: Arthur Heymans <arthur(a)aheymans.xyz>
---
M src/cpu/intel/model_106cx/Makefile.inc
M src/cpu/intel/model_106cx/model_106cx_init.c
M src/cpu/intel/model_6ex/Makefile.inc
M src/cpu/intel/model_6ex/model_6ex_init.c
M src/cpu/intel/model_f3x/Makefile.inc
M src/cpu/intel/model_f3x/model_f3x_init.c
M src/cpu/intel/model_f4x/Makefile.inc
M src/cpu/intel/model_f4x/model_f4x_init.c
M src/northbridge/intel/i945/Kconfig
M src/northbridge/intel/i945/northbridge.c
M src/southbridge/intel/i82801gx/lpc.c
11 files changed, 22 insertions(+), 43 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/00/25600/38
--
To view, visit https://review.coreboot.org/c/coreboot/+/25600
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I955551b99e9cbc397f99c2a6bd355c6070390bcb
Gerrit-Change-Number: 25600
Gerrit-PatchSet: 38
Gerrit-Owner: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: HAOUAS Elyes <ehaouas(a)noos.fr>
Gerrit-Reviewer: Martin Roth <martinroth(a)google.com>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Reviewer: Stefan Reinauer <stefan.reinauer(a)coreboot.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-MessageType: newpatchset
[View Less]
Hello Patrick Rudolph, Stefan Reinauer, Paul Menzel, build bot (Jenkins), Patrick Georgi, Martin Roth,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/23434
to look at the new patch set (#47).
Change subject: nb/intel/gm45: Use parallel MP init
......................................................................
nb/intel/gm45: Use parallel MP init
This places the parallel mp ops up in the model_1067x dir and is
included from other Intel …
[View More]core2 CPU dirs that can use the same code.
Tested on Thinkpad X200 on which boot time is reduced by ~35ms.
Change-Id: Iac416f671407246ee223075eee1aff511e612889
Signed-off-by: Arthur Heymans <arthur(a)aheymans.xyz>
---
M src/cpu/intel/model_1067x/Makefile.inc
M src/cpu/intel/model_1067x/model_1067x_init.c
A src/cpu/intel/model_1067x/mp_init.c
M src/cpu/intel/model_6fx/Makefile.inc
M src/cpu/intel/model_6fx/model_6fx_init.c
M src/northbridge/intel/gm45/Kconfig
M src/northbridge/intel/gm45/northbridge.c
M src/southbridge/intel/i82801ix/lpc.c
8 files changed, 109 insertions(+), 30 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/34/23434/47
--
To view, visit https://review.coreboot.org/c/coreboot/+/23434
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Iac416f671407246ee223075eee1aff511e612889
Gerrit-Change-Number: 23434
Gerrit-PatchSet: 47
Gerrit-Owner: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Martin Roth <martinroth(a)google.com>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Reviewer: Stefan Reinauer <stefan.reinauer(a)coreboot.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-MessageType: newpatchset
[View Less]
Hello Patrick Rudolph, build bot (Jenkins), Patrick Georgi,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/30868
to look at the new patch set (#2).
Change subject: cpu/intel/smm/gen1: Add pineview to the check for alt SMRR MSR's
......................................................................
cpu/intel/smm/gen1: Add pineview to the check for alt SMRR MSR's
Intel pineview has the same alternative SMRR MSR and
IA32_FEATURE_CONTROL enable …
[View More]bit as core2 CPUs so properly check for
that before enabling this feature.
This also exposes a function to fetch whether alternative SMRR MSR's
ought to be used.
Change-Id: Iccaabfa95b8dc4366b8e7e2c2a526081d4af0efa
Signed-off-by: Arthur Heymans <arthur(a)aheymans.xyz>
---
M src/cpu/intel/smm/gen1/smi.h
M src/cpu/intel/smm/gen1/smmrelocate.c
2 files changed, 23 insertions(+), 7 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/68/30868/2
--
To view, visit https://review.coreboot.org/c/coreboot/+/30868
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Iccaabfa95b8dc4366b8e7e2c2a526081d4af0efa
Gerrit-Change-Number: 30868
Gerrit-PatchSet: 2
Gerrit-Owner: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-MessageType: newpatchset
[View Less]
Frans Hendriks has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/30218 )
Change subject: vendorcode/eltan: Add vendor code for measured and verified boot
......................................................................
Patch Set 8:
> Patch Set 7:
>
> BTW, you can add all the related patches to the same gerrit topic so that it is easier to keep track of them. There is also the option of using patch trains, so that you build on previous, not yet …
[View More]merged patches. It is good for reviewing as well, since one can follow the order in which the code was added.
Use same gerrit topic for all patches?
Do you have an example of 'patch train'? Or you mean to rebase a patch on other patch?
--
To view, visit https://review.coreboot.org/c/coreboot/+/30218
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ic1d5a21d40b6a31886777e8e9fe7b28c860f1a80
Gerrit-Change-Number: 30218
Gerrit-PatchSet: 8
Gerrit-Owner: Frans Hendriks <fhendriks(a)eltan.com>
Gerrit-Reviewer: Frans Hendriks <fhendriks(a)eltan.com>
Gerrit-Reviewer: Martin Roth <martinroth(a)google.com>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Philipp Deppenwiese <zaolin.daisuki(a)gmail.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-CC: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-CC: Nico Huber <nico.h(a)gmx.de>
Gerrit-CC: Patrick Rudolph
Gerrit-CC: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-CC: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Comment-Date: Mon, 14 Jan 2019 13:16:41 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
[View Less]
Felix Held has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/28971 )
Change subject: src/superio/smsc/smscsuperio/superio.c: Add SCH5504
......................................................................
Patch Set 3: Code-Review+2
--
To view, visit https://review.coreboot.org/c/coreboot/+/28971
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: …
[View More]I6c433fa04c01ba6315bcdca699030dfce18a169a
Gerrit-Change-Number: 28971
Gerrit-PatchSet: 3
Gerrit-Owner: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Christoph Pomaska <github(a)aufmachen.jetzt>
Gerrit-Reviewer: Felix Held <felix-coreboot(a)felixheld.de>
Gerrit-Reviewer: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Comment-Date: Mon, 14 Jan 2019 13:05:37 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
[View Less]
Felix Held has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/30827 )
Change subject: mainboard/ocp/wedge100s: Fix uart
......................................................................
Patch Set 1: Code-Review+2
(1 comment)
https://review.coreboot.org/#/c/30827/1/src/mainboard/ocp/wedge100s/romstag…
File src/mainboard/ocp/wedge100s/romstage.c:
https://review.coreboot.org/#/c/30827/1/src/mainboard/ocp/wedge100s/romstag…
PS1, Line 96: }
> That should …
[View More]probably be configured in common code depending on devicetree.cb. […]
that sounds like a plan
--
To view, visit https://review.coreboot.org/c/coreboot/+/30827
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I59cd83ed43dbf4ee26685e4a573de153291f7074
Gerrit-Change-Number: 30827
Gerrit-PatchSet: 1
Gerrit-Owner: Patrick Rudolph <patrick.rudolph(a)9elements.com>
Gerrit-Reviewer: Andrea Barberio <insomniac(a)slackware.it>
Gerrit-Reviewer: David Hendricks <david.hendricks(a)gmail.com>
Gerrit-Reviewer: Felix Held <felix-coreboot(a)felixheld.de>
Gerrit-Reviewer: Nico Huber <nico.h(a)gmx.de>
Gerrit-Reviewer: Patrick Rudolph <patrick.rudolph(a)9elements.com>
Gerrit-Reviewer: Philipp Deppenwiese <zaolin.daisuki(a)gmail.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Kyösti Mälkki <kyosti.malkki(a)gmail.com>
Gerrit-CC: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Comment-Date: Mon, 14 Jan 2019 13:04:24 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Comment-In-Reply-To: Patrick Rudolph <siro(a)das-labor.org>
Comment-In-Reply-To: Felix Held <felix-coreboot(a)felixheld.de>
Comment-In-Reply-To: Nico Huber <nico.h(a)gmx.de>
Gerrit-MessageType: comment
[View Less]
Patrick Georgi has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/27586 )
Change subject: cpu/intel: Configure IA32_FEATURE_CONTROL for alternative SMRR
......................................................................
Patch Set 26:
(1 comment)
https://review.coreboot.org/#/c/27586/26//COMMIT_MSG
Commit Message:
https://review.coreboot.org/#/c/27586/26//COMMIT_MSG@14
PS26, Line 14: the possibility to not lock VMX
> CONFIG_ENABLE_VMX is separate from …
[View More]CONFIG_SET_IA32_FC_LOCK_BIT. […]
If that bit must be set for those CPUs for SMRR to work, please do so. Otherwise we'd enable invalid configurations, no?
--
To view, visit https://review.coreboot.org/c/coreboot/+/27586
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ia85602e75385e24ebded75e6e6dd38ccc969a76b
Gerrit-Change-Number: 27586
Gerrit-PatchSet: 26
Gerrit-Owner: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Arthur Heymans <arthur(a)aheymans.xyz>
Gerrit-Reviewer: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: Paul Menzel <paulepanter(a)users.sourceforge.net>
Gerrit-Reviewer: Stefan Reinauer <stefan.reinauer(a)coreboot.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Comment-Date: Mon, 14 Jan 2019 13:00:14 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Arthur Heymans <arthur(a)aheymans.xyz>
Comment-In-Reply-To: Patrick Georgi <pgeorgi(a)google.com>
Gerrit-MessageType: comment
[View Less]