Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59520 )
Change subject: security/intel/txt: Fix GETSEC checks in romstage
......................................................................
Patch Set 3:
(1 comment)
Commit Message:
https://review.coreboot.org/c/coreboot/+/59520/comment/4ba0b4e7_b2cdc9a1
PS3, Line 11: Also noticed that the lock bit
: of IA32_FEATURE_CONTROL cannot be cleared by issuing neither global
: reset nor full reset on Sandybridge/Ivybridge platforms which results
: in a reset loop.
Huh, this is very unusual. SNB BWG says the MSR is locked "until an S5 reset occurs".
--
To view, visit https://review.coreboot.org/c/coreboot/+/59520
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ie9103041498f557b85019a56e1252090a4fcd0c9
Gerrit-Change-Number: 59520
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:25:53 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59519 )
Change subject: security/intel/txt/ramstage.c: Fix HEAP_ACM element size calculation
......................................................................
Patch Set 3:
(1 comment)
Commit Message:
https://review.coreboot.org/c/coreboot/+/59519/comment/adb7dc30_8321f6cf
PS3, Line 7: Fix
Why is the original code wrong?
--
To view, visit https://review.coreboot.org/c/coreboot/+/59519
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ib0c37a66d96e1ca3fb4d3f665e3ad35c6f1c5c1e
Gerrit-Change-Number: 59519
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-CC: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:22:00 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59518 )
Change subject: security/intel/txt: Allow platforms without FIT enable Intel TXT
......................................................................
Patch Set 3: Code-Review+1
(1 comment)
Patchset:
PS3:
OK, this is fine because the Makefile.inc part that adds ACMs inside FIT is already guarded.
--
To view, visit https://review.coreboot.org/c/coreboot/+/59518
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I2858c8de9396449a0ee30837a98fab05570a6259
Gerrit-Change-Number: 59518
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:18:23 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59517 )
Change subject: security/intel/txt: Use common txt_reset_platform
......................................................................
Patch Set 3: Code-Review+1
(3 comments)
Commit Message:
PS3:
This change does two things:
- Where applicable, it uses the `set_global_reset()` function that CB:50362 moved to common code.
- Replaces a `full_reset()` with `txt_reset_platform()` in the TXT wake error path.
I'd much prefer to have two separate commits.
File src/security/intel/txt/getsec.c:
https://review.coreboot.org/c/coreboot/+/59517/comment/261eda97_f424522f
PS3, Line 71: txt_reset_platform();
No, a global reset is not necessary here. This is just to unlock the IA32_FEATURE_CONTROL MSR.
File src/security/intel/txt/romstage.c:
https://review.coreboot.org/c/coreboot/+/59517/comment/a8fcbc02_e082dc71
PS3, Line 112: txt_reset_platform();
OK; Haswell RC does a global reset here.
--
To view, visit https://review.coreboot.org/c/coreboot/+/59517
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I561458044860ee5a26f7d61bcff1c407fa1533f2
Gerrit-Change-Number: 59517
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:17:03 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski, Patrick Rudolph.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59516 )
Change subject: security/intel/txt: Implement GETSEC PARAMETER dumping
......................................................................
Patch Set 3: Code-Review+1
(1 comment)
File src/security/intel/txt/logging.c:
https://review.coreboot.org/c/coreboot/+/59516/comment/33f7242b_63ebb111
PS3, Line 226: txt_dump_parameters
I'd name this function `txt_dump_getsec_parameters`
--
To view, visit https://review.coreboot.org/c/coreboot/+/59516
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I3b2c8337a8d86000a5b43788840d15146b662598
Gerrit-Change-Number: 59516
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Attention: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:10:42 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59515 )
Change subject: security/intel/txt: Remove unused region device
......................................................................
Patch Set 4: Code-Review+1
--
To view, visit https://review.coreboot.org/c/coreboot/+/59515
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I98afba35403d5d2cd9eeb7df6d1ca0171894e9d4
Gerrit-Change-Number: 59515
Gerrit-PatchSet: 4
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:08:59 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski, Patrick Rudolph.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59514 )
Change subject: security/intel/txt: Correct reporting of chipset production fuse state
......................................................................
Patch Set 3: Code-Review+1
(1 comment)
File src/security/intel/txt/common.c:
https://review.coreboot.org/c/coreboot/+/59514/comment/9092abef_e7533e47
PS3, Line 152: read32
You can use `read32p()` instead to avoid casts
--
To view, visit https://review.coreboot.org/c/coreboot/+/59514
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ic86c5a9e1d162630a1cf61435d1014edabf104b0
Gerrit-Change-Number: 59514
Gerrit-PatchSet: 3
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Attention: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:07:14 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59513 )
Change subject: security/intel/txt: Allow to set TXT BIOS Data Region version
......................................................................
Patch Set 2: Code-Review+1
(1 comment)
File src/security/intel/txt/Kconfig:
https://review.coreboot.org/c/coreboot/+/59513/comment/07754c00_41e51de6
PS2, Line 54:
nit: drop one empty line
--
To view, visit https://review.coreboot.org/c/coreboot/+/59513
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ic2550bd4008559bd47de9e35f8b1c7b52e6e0f5f
Gerrit-Change-Number: 59513
Gerrit-PatchSet: 2
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:05:48 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Michał Żygowski.
Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59512 )
Change subject: nb/intel/sandybridge: Add support for DPR
......................................................................
Patch Set 2: Code-Review+1
--
To view, visit https://review.coreboot.org/c/coreboot/+/59512
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: Ia22e49ba58709acfa0afe0921aa71d83cc06c129
Gerrit-Change-Number: 59512
Gerrit-PatchSet: 2
Gerrit-Owner: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-Attention: Michał Żygowski <michal.zygowski(a)3mdeb.com>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:04:21 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment
Attention is currently required from: Subrata Banik, Maulik V Vaghela, Tim Wawrzynczak, Angel Pons, Patrick Rudolph.
EricR Lai has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59509 )
Change subject: soc/intel/common/thermal: Refactor thermal block to improve reusability
......................................................................
Patch Set 6:
(1 comment)
File src/soc/intel/common/block/thermal/Kconfig:
https://review.coreboot.org/c/coreboot/+/59509/comment/9d87d900_35abe5b6
PS4, Line 7: config SOC_INTEL_COMMON_BLOCK_THERMAL_PCI_DEV
: bool
: default n
: select SOC_INTEL_COMMON_BLOCK_THERMAL
: help
: This option allows to configure PCH thermal registers using Thermal PCI device
: for chipsets till Ice Lake PCH.
:
: config SOC_INTEL_COMMON_BLOCK_THERMAL_BEHIND_PMC
: bool
: default n
: select SOC_INTEL_COMMON_BLOCK_THERMAL
: help
: This option allows to configure PCH thermal registers using PMC PWRMBASE
: for chipsets since Tiger Lake PCH.
> @Angel, looks like its being considered as a recursive dependency. […]
You can just use the if SOC_INTEL_COMMON_BLOCK_THERMAL_PCI_DEV and set another default = n.
--
To view, visit https://review.coreboot.org/c/coreboot/+/59509
To unsubscribe, or for help writing mail filters, visit https://review.coreboot.org/settings
Gerrit-Project: coreboot
Gerrit-Branch: master
Gerrit-Change-Id: I14df5145629ef03f358b98e824bca6a5b8ebdfc6
Gerrit-Change-Number: 59509
Gerrit-PatchSet: 6
Gerrit-Owner: Subrata Banik <subrata.banik(a)intel.com>
Gerrit-Reviewer: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Reviewer: EricR Lai <ericr_lai(a)compal.corp-partner.google.com>
Gerrit-Reviewer: Maulik V Vaghela <maulik.v.vaghela(a)intel.com>
Gerrit-Reviewer: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Reviewer: Tim Wawrzynczak <twawrzynczak(a)chromium.org>
Gerrit-Reviewer: build bot (Jenkins) <no-reply(a)coreboot.org>
Gerrit-CC: Subrata Banik <subi.banik(a)gmail.com>
Gerrit-Attention: Subrata Banik <subi.banik(a)gmail.com>
Gerrit-Attention: Maulik V Vaghela <maulik.v.vaghela(a)intel.com>
Gerrit-Attention: Tim Wawrzynczak <twawrzynczak(a)chromium.org>
Gerrit-Attention: Subrata Banik <subrata.banik(a)intel.com>
Gerrit-Attention: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-Attention: Patrick Rudolph <siro(a)das-labor.org>
Gerrit-Comment-Date: Mon, 22 Nov 2021 13:00:51 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Subrata Banik <subi.banik(a)gmail.com>
Comment-In-Reply-To: Subrata Banik <subrata.banik(a)intel.com>
Comment-In-Reply-To: Angel Pons <th3fanbus(a)gmail.com>
Gerrit-MessageType: comment