[coreboot-gerrit] Change in coreboot[master]: security/intel/stm: Check for processor STM support

[Angel Pons (Code Review)]

Angel Pons has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/38836 )

Change subject: security/intel/stm: Check for processor STM support
......................................................................

Patch Set 3:

(2 comments)

https://review.coreboot.org/c/coreboot/+/38836/3/src/security/intel/stm/StmP... 
File src/security/intel/stm/StmPlatformSmm.c:

https://review.coreboot.org/c/coreboot/+/38836/3/src/security/intel/stm/StmP... 
PS3, Line 162: stm_chk
nit: maybe call this vmx_basic ?

https://review.coreboot.org/c/coreboot/+/38836/3/src/security/intel/stm/StmP... 
PS3, Line 172: BIOS_WARNING
How bad is it when STM has been enabled, but the CPU does not support it? Can the system still boot successfully? If so, can it run without any security issues, or would it result in security weaknesses?