Arthur Heymans uploaded patch set #3 to this change.
cpu/x86/smm: Add sinkhole mitigation to relocatable smmstub
This adds a check for LAPIC base twice. There is a very early check
when the CPU is still executing in real mode checks if the LAPIC base
is inside the region [smmbase,smmbase + SMM_DEFAULT_SIZE). The CPU
cannot use anything but a hardcoded size since even accessing the
relocatable parameters is impossible in the state of the CPU.
The actual SMI handler is located above smmbase + SMM_DEFAULT_SIZE and
before jumping to it the LAPIC base is checked against the whole SMM
region. Given that we have a working stack at this point, this is done
in C code.
Signed-off-by: Arthur Heymans <firstname.lastname@example.org>
4 files changed, 84 insertions(+), 0 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/89/37289/3
To view, visit change 37289. To unsubscribe, or for help writing mail filters, visit settings.